Georges-Antoine Assi be476cb7dc Only set CSRF cookie on http.response.start ...

ASGI spec only allows headers on the http.response.start message;
appending Set-Cookie to body messages is out-of-spec and may break on
some servers. Early-return for non-start messages.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-24 15:46:50 -04:00

..

auth

Only set CSRF cookie on http.response.start

2026-05-24 15:46:50 -04:00

database

Stuff

2026-05-17 12:43:33 -04:00

filesystem

soimplify

2026-05-21 17:17:30 -04:00

metadata

Merge branch 'master' into fix/screenscraper-skip-name-search-after-notgame

2026-05-23 20:54:19 -04:00

sync

fix check

2026-04-06 09:09:46 -04:00

__init__.py

refactor handlers out into own files

2024-05-05 12:45:56 -04:00

netplay_handler.py

changes from bot reivew

2025-12-07 12:19:13 -05:00

play_session_handler.py

more simplify

2026-04-06 22:29:55 -04:00

redis_handler.py

[ROMM-2657] Safe access env vars with defaults

2025-11-15 14:54:21 -05:00

scan_handler.py

Merge branch 'master' into fix/screenscraper-skip-name-search-after-notgame

2026-05-23 20:54:19 -04:00

socket_handler.py

use redis to store netplay data

2025-12-07 12:02:35 -05:00