Skip to content

Removes the CSRF token if the emojis.json is on a CDN

Tim Zallmann requested to merge tz-remove-csrf-token-for-emojis-json into master

What does this MR do?

As described in https://gitlab.com/gitlab-org/gitlab-ce/issues/58784#note_149269960 there is a problem with the CDN's CORS configuration when accessing the emojis.json this MR will resolve the problem with the CSRF token header by removing it from the request headers.

What are the relevant issue numbers?

Closes #58784 (closed)

Does this MR meet the acceptance criteria?

Edited by Tim Zallmann

Merge request reports