Skip to content
Navigation Menu
Sign in
Products
Platform
GitHub
Repository hosting, code review, and collaboration
Copilot
AI coding agent for tasks, projects and automated work
Build & Ship
Actions
CI/CD and automation
Code Quality
Quality analysis, fixes, and enforcement
Codespaces
Cloud development environments
Secure
Code Security
Vulnerability detection and remediation
Secret Protection
Secret scanning and leak prevention
All Features
Developers
Learn
Documentation
Training
Certifications
Build
Build with Copilot
Customize Copilot
Integrations
Explore
Trending repos
GitHub Sponsors
Developer articles
Changelog
Changelog
Your source for the latest features, improvements, and fixes across GitHub products, all in one place.
Businesses
By Stage
Enterprises
Team
Startups
Nonprofits
By Industry
Healthcare
Financial services
Manufacturing
Government
See all industries
Evaluate GitHub
Why GitHub
Customer Stories
Business insights
Trust Center
Add-ons
GitHub Advanced Security
Enterprise-grade code security
Copilot for business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Resources
Learn & Connect
Documentation
Resource center
Blog
Events & webinars
Community Forum
Customer Stories
Integrations
Support
Customer support
Training
GitHub Status
Company
About
Partners
Changelog
GitHub Universe
GitHub Universe
The event for developers, by developers — talks, workshops, and what’s next for GitHub.
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
gorilla
csrf
Repository navigation
Code
Issues
21
(21)
Pull requests
19
(19)
Actions
Projects
Security and quality
1
(1)
Insights
More
items
Actions: gorilla/csrf
Actions
All workflows
Workflows
Add issue or pull request to Project
Add issue or pull request to Project
Security
Security
Test
Test
Verify
Verify
Show more workflows...
Management
Caches
Lockfile
All workflows
All workflows
Actions
Loading...
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading.
Please reload this page
.
will be ignored since log searching is not yet available
Showing runs from all workflows
will be ignored since log searching is not yet available
20 workflow runs
20 workflow runs
Workflow
Filter by Workflow
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching workflows.
Event
Filter by Event
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching events.
Status
Filter by Status
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching statuses.
Branch
Filter by Branch
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching branches.
Actor
Filter by Actor
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching users.
helpers: read random bytes via injectable reader
Add issue or pull request to Project
#41:
Pull request
#214
opened by
team-humaki
8s
8s
View #214
View workflow file
csrf: honor Sec-Fetch-Site same-origin when Host is rewritten
Add issue or pull request to Project
#40:
Pull request
#213
opened by
team-humaki
6s
6s
View #213
View workflow file
csrf: treat Secure(false) as plaintext for Origin checks
Add issue or pull request to Project
#39:
Pull request
#212
opened by
team-humaki
9s
9s
View #212
View workflow file
Accept scheme://host entries in TrustedOrigins
Verify
#23:
Pull request
#211
opened by
AshSgDe29071999
30d 0h 1m 28s
AshSgDe29071999:fix/trusted-origins-full-origin
AshSgDe29071999:fix/trusted-origins-full-origin
30d 0h 1m 28s
View #211
View workflow file
Accept scheme://host entries in TrustedOrigins
Test
#38:
Pull request
#211
opened by
AshSgDe29071999
30d 0h 1m 28s
AshSgDe29071999:fix/trusted-origins-full-origin
AshSgDe29071999:fix/trusted-origins-full-origin
30d 0h 1m 28s
View #211
View workflow file
Accept scheme://host entries in TrustedOrigins
Security
#23:
Pull request
#211
opened by
AshSgDe29071999
30d 0h 1m 28s
AshSgDe29071999:fix/trusted-origins-full-origin
AshSgDe29071999:fix/trusted-origins-full-origin
30d 0h 1m 28s
View #211
View workflow file
Accept scheme://host entries in TrustedOrigins
Add issue or pull request to Project
#38:
Pull request
#211
opened by
AshSgDe29071999
8s
8s
View #211
View workflow file
fix: use io.ReadFull(rand.Reader, b) in generateRandomBytes
Verify
#22:
Pull request
#210
opened by
aoright
30d 0h 3m 59s
aoright:fix/use-readfull-rand-reader
aoright:fix/use-readfull-rand-reader
30d 0h 3m 59s
View #210
View workflow file
fix: use io.ReadFull(rand.Reader, b) in generateRandomBytes
Security
#22:
Pull request
#210
opened by
aoright
30d 0h 3m 59s
aoright:fix/use-readfull-rand-reader
aoright:fix/use-readfull-rand-reader
30d 0h 3m 59s
View #210
View workflow file
fix: use io.ReadFull(rand.Reader, b) in generateRandomBytes
Test
#37:
Pull request
#210
opened by
aoright
30d 0h 3m 59s
aoright:fix/use-readfull-rand-reader
aoright:fix/use-readfull-rand-reader
30d 0h 3m 59s
View #210
View workflow file
fix: use io.ReadFull(rand.Reader, b) in generateRandomBytes
Add issue or pull request to Project
#37:
Pull request
#210
opened by
aoright
6s
6s
View #210
View workflow file
fix: use io.ReadFull(rand.Reader, b) in generateRandomBytes
Verify
#21:
Pull request
#209
opened by
aoright
30d 0h 2m 18s
aoright:fix/use-io-readfull-for-rand-reader
aoright:fix/use-io-readfull-for-rand-reader
30d 0h 2m 18s
View #209
View workflow file
fix: use io.ReadFull(rand.Reader, b) in generateRandomBytes
Test
#36:
Pull request
#209
opened by
aoright
30d 0h 2m 18s
aoright:fix/use-io-readfull-for-rand-reader
aoright:fix/use-io-readfull-for-rand-reader
30d 0h 2m 18s
View #209
View workflow file
fix: use io.ReadFull(rand.Reader, b) in generateRandomBytes
Security
#21:
Pull request
#209
opened by
aoright
30d 0h 2m 18s
aoright:fix/use-io-readfull-for-rand-reader
aoright:fix/use-io-readfull-for-rand-reader
30d 0h 2m 18s
View #209
View workflow file
fix: use io.ReadFull(rand.Reader, b) in generateRandomBytes
Add issue or pull request to Project
#36:
Pull request
#209
opened by
aoright
8s
8s
View #209
View workflow file
Treat a literal "null" Origin like a missing Origin
Add issue or pull request to Project
#35:
Pull request
#208
opened by
c-tonneslan
9s
9s
View #208
View workflow file
csrf: reject Origin: null as an opaque origin
Add issue or pull request to Project
#34:
Pull request
#207
opened by
c-tonneslan
7s
7s
View #207
View workflow file
Update README with CSRF token handling instructions in JS SPA
Add issue or pull request to Project
#33:
Pull request
#206
opened by
pawciobiel
8s
8s
View #206
View workflow file
[BUG] Support "null" value for Origin header
Add issue or pull request to Project
#32:
Issue
#205
opened by
raulci
8s
8s
View workflow file
Fix for this CVE-2025-47909 is required
Add issue or pull request to Project
#31:
Issue
#204
opened by
satishrayavarapu-cmd
13s
13s
View workflow file
You can’t perform that action at this time.