coder

mirror of https://github.com/coder/coder.git synced 2025-07-08 11:39:50 +00:00

Files

Mathias Fredriksson e508057d1a fix: Avoid panic in ServerSentEventSender by keeping handler alive (#4821 )

The goroutine launched by `ServerSentEventSender` can perform a write
and flush after the calling http handler has exited, at this point the
resources (e.g. `http.ResponseWriter`) are no longer safe to use.

To work around this issue, heartbeats and sending events are now handled
by the goroutine which signals its closure via a channel. This allows
the calling handler to ensure it is kept alive until it's safe to exit.

Fixes #4807

2022-11-01 16:57:38 +02:00

cookie_test.go

feat: Implement (but not enforce) CSRF for FE requests (#3786 )

2022-09-13 15:26:46 -04:00

cookie.go

fix: Strip session_token cookie from app proxy requests (#3528 )

2022-08-17 17:09:45 +00:00

httpapi_test.go

feat: trace httpapi.{Read,Write} (#4134 )

2022-09-21 17:07:00 -05:00

httpapi.go

fix: Avoid panic in ServerSentEventSender by keeping handler alive (#4821 )