3 Commits

Author	SHA1	Message	Date
cbergmiller	45df7445f4	Read csrftoken from DOM if no cookie is set (#826)	2019-12-27 14:26:42 +00:00
Dan Palmer	2b08e59bea	Revert to default query execution behaviour ... The only security risk here is persuading a user to execute a mutation, which is probably not a big risk. To mitigate this risk and still keep the same UX (that is so valuable), would require more work than is proportionate for this PR.	2018-09-09 21:44:30 +01:00
Dan Palmer	e50e12bc9f	Move GraphiQL's JS into a separate file for ease of CSP	2018-08-30 20:36:26 +01:00