isaaccladandCursor 67470badb8 Exempt public Payment QR POSTs from CSRF checks. ...

Browser sessions stay on ladl.link while Pay is proxied server-side to Mini without cookies, so satellite CSRF tokens cannot bind.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-07-13 23:12:16 +00:00

..

cache

Initial Ladill Mini app — trader payment QRs without styling.

2026-06-07 18:43:39 +00:00

app.php

Exempt public Payment QR POSTs from CSRF checks.

2026-07-13 23:12:16 +00:00

providers.php

Initial Ladill Mini app — trader payment QRs without styling.

2026-06-07 18:43:39 +00:00