Commit Graph

5 Commits

Author SHA1 Message Date
Joe Rhodes
da705ee1ee make curl and iql work with auth_headers; make disconnected default 2020-03-10 14:11:06 -04:00
Ben Howes
6b8c5bdefc
Allow for easier template overrides in graphiql (#863)
* don't replace <body>

* Update graphene_django/templates/graphene/graphiql.html

Co-Authored-By: Jonathan Kim <jkimbo@gmail.com>

* Fix editor styling and initialisation

Co-authored-by: Jonathan Kim <jkimbo@gmail.com>
2020-02-07 10:16:11 +00:00
cbergmiller
45df7445f4 Read csrftoken from DOM if no cookie is set (#826) 2019-12-27 14:26:42 +00:00
Dan Palmer
2b08e59bea
Revert to default query execution behaviour
The only security risk here is persuading a user to execute a mutation,
which is probably not a big risk. To mitigate this risk and still keep
the same UX (that is so valuable), would require more work than is
proportionate for this PR.
2018-09-09 21:44:30 +01:00
Dan Palmer
e50e12bc9f
Move GraphiQL's JS into a separate file for ease of CSP 2018-08-30 20:36:26 +01:00