epriestley c9ff6ce390 Add CSRF to SMS challenges, and pave the way for more MFA types (including Duo) ... Summary: Depends on D20026. Ref T13222. Ref T13231. The primary change here is that we'll no longer send you an SMS if you hit an MFA gate without CSRF tokens. Then there's a lot of support for genralizing into Duo (and other push factors, potentially), I'll annotate things inline. Test Plan: Implemented Duo, elsewhere. Reviewers: amckinley Reviewed By: amckinley Maniphest Tasks: T13231, T13222 Differential Revision: https://secure.phabricator.com/D20028		2019-01-24 15:10:57 -08:00
..
rsrc	Add CSRF to SMS challenges, and pave the way for more MFA types (including Duo)	2019-01-24 15:10:57 -08:00
index.php	Modularize rate/connection limits in Phabricator	2017-10-13 13:12:05 -07:00