6cbc376d6e
* /api endpoints only allows requests with application/json Content-Type Otherwise sends 406 Unacceptable * Uses CSRF token The CSRF token is sent as the cookie 'XSRF-TOKEN' on all HTML page requests. This token is picked up automatically by axios and sent to the API with all requests as an 'X-XSRF-TOKEN' header. The middleware runs on all routes and verifies that the token matches what's stored in the session. |
||
|---|---|---|
| .. | ||
| filePath.js | ||
| mail.js | ||
| previewGeneration.js | ||
| renderMjml.js | ||
| requestsOfType.js | ||