vrr/agent-zero
2
0
Fork 0
mirror of https://github.com/agent0ai/agent-zero.git synced 2026-05-07 17:22:09 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
agent-zero/webui/js
History
Paolo Calvi 07f94ef4b5 Fix WebSocket CSRF validation failure on Chromium browsers over HTTPS 
SameSite=Strict cookies are not sent with WebSocket upgrade requests on
Chromium-based browsers (Brave confirmed), causing the CSRF cookie
check at connect time to fail with 'csrf cookie mismatch'. This breaks
the state_sync namespace, preventing the UI from loading chats.

Change SameSite from Strict to Lax for both the Flask session cookie
and the JavaScript-set CSRF token cookie. Lax still prevents cross-site
POST CSRF while allowing same-origin WebSocket upgrades to include
cookies.

Fixes #1237
2026-03-11 00:00:33 +01:00
..
AlpineStore.js parse LLM chunk fix, alpine store state save/load 2025-12-02 12:36:42 +01:00
api.js Fix WebSocket CSRF validation failure on Chromium browsers over HTTPS 2026-03-11 00:00:33 +01:00
cache.js Add frontend cache and integrate with extensions 2026-03-04 16:34:59 +01:00
components.js Support webui JS/HTML extensions and plugin paths 2026-02-17 10:17:19 +01:00
confirmClick.js Refactor extensions to async/sync API 2026-03-06 11:32:08 +01:00
confirmDialog.js marketplace polish; add confirm-dialog extension hook and plugin_scan marketplace note 2026-03-09 11:41:10 +01:00
css.js merge prep 2025-06-30 16:16:51 +02:00
device.js cleanups and fixes 2025-07-12 20:55:53 +02:00
extensions.js Add tool request validation and plugin change notifications 2026-03-10 13:08:48 +01:00
initFw.js Use prototype-based context for plugin settings 2026-03-09 21:19:55 +01:00
initializer.js cleanups and fixes 2025-07-12 20:55:53 +02:00
manifest.json v0.9.5-pre cleanup, polishing, bugfixing 2025-08-25 09:59:44 +02:00
messages.js refactor: move drawMessageCodeExe into plugin JS extension 2026-03-08 23:20:26 +08:00
modals.js add extension points coverage; add JS hooks 2026-02-18 12:32:04 +01:00
scroller.js code exec reset polish, history and scroller fix 2026-02-05 16:47:38 +01:00
shortcuts.js project finalizing, openrouter embeddings 2025-11-13 08:52:45 +01:00
sleep.js secrets polishing 2025-08-15 09:35:30 +02:00
speech_browser.js finalize the notification system 2025-07-12 16:36:20 +02:00
sw.js Implement Progressive Web App (PWA) installation support (#688) 2025-08-20 08:27:08 +02:00
time-utils.js timestamp log fix 2026-01-06 19:02:47 +01:00
timeout.js x-components + mcp wip 2025-06-02 09:48:25 +02:00
transformers@3.0.2.js Squashed commit of the following: 2024-12-08 00:27:02 +01:00
websocket.js WebSocket merge 2026-02-01 16:07:45 +01:00