Skip to content

🔥 feat: add CrossOriginProtectionOnly mode to CSRF middleware #11686

🔥 feat: add CrossOriginProtectionOnly mode to CSRF middleware

🔥 feat: add CrossOriginProtectionOnly mode to CSRF middleware #11686

Triggered via pull request September 7, 2026 21:24
Status Failure
Total duration 4m 8s
Artifacts

test.yml

on: pull_request
Matrix: repeated
Matrix: unit
Fit to window
Zoom out
Zoom in

Annotations

86 errors
unit (1.26.x, blacksmith-4vcpu-ubuntu-2404): middleware/csrf/csrf.go#L427
undefined: matchSubdomainOrigin
unit (1.26.x, blacksmith-4vcpu-ubuntu-2404): middleware/csrf/csrf.go#L427
undefined: matchSubdomainOrigin
unit (1.27.x, blacksmith-6vcpu-macos-latest)
The strategy configuration was canceled because "unit._1_26_x_blacksmith-4vcpu-" failed
unit (1.27.x, blacksmith-6vcpu-macos-latest): middleware/csrf/csrf.go#L427
undefined: matchSubdomainOrigin
unit (1.27.x, blacksmith-6vcpu-macos-latest): middleware/csrf/csrf.go#L427
undefined: matchSubdomainOrigin
unit (1.27.x, blacksmith-4vcpu-windows-2025)
The strategy configuration was canceled because "unit._1_26_x_blacksmith-4vcpu-" failed
unit (1.27.x, blacksmith-4vcpu-windows-2025): middleware/csrf/csrf.go#L427
undefined: matchSubdomainOrigin
unit (1.27.x, blacksmith-4vcpu-windows-2025): middleware/csrf/csrf.go#L427
undefined: matchSubdomainOrigin
unit (1.26.x, blacksmith-4vcpu-windows-2025)
The strategy configuration was canceled because "unit._1_26_x_blacksmith-4vcpu-" failed
unit (1.26.x, blacksmith-4vcpu-windows-2025): middleware/csrf/csrf.go#L427
undefined: matchSubdomainOrigin
unit (1.26.x, blacksmith-4vcpu-windows-2025): middleware/csrf/csrf.go#L427
undefined: matchSubdomainOrigin
unit (1.26.x, blacksmith-6vcpu-macos-latest)
The strategy configuration was canceled because "unit._1_26_x_blacksmith-4vcpu-" failed
unit (1.26.x, blacksmith-6vcpu-macos-latest): middleware/csrf/csrf.go#L427
undefined: matchSubdomainOrigin
unit (1.26.x, blacksmith-6vcpu-macos-latest): middleware/csrf/csrf.go#L427
undefined: matchSubdomainOrigin
unit (1.27.x, blacksmith-4vcpu-ubuntu-2404)
The strategy configuration was canceled because "unit._1_26_x_blacksmith-4vcpu-" failed
unit (1.27.x, blacksmith-4vcpu-ubuntu-2404)
The operation was canceled.
repeated (1): middleware/csrf/csrf.go#L391
undefined: subdomain
repeated (1): middleware/csrf/csrf.go#L91
undefined: normalizeOrigin
repeated (1): middleware/csrf/csrf.go#L80
undefined: subdomain
repeated (1): middleware/csrf/csrf_test.go#L3646
undefined: fmt
repeated (1): middleware/csrf/csrf_test.go#L3571
undefined: fmt
repeated (1): middleware/csrf/csrf.go#L427
undefined: matchSubdomainOrigin
repeated (1): middleware/csrf/csrf.go#L423
undefined: subdomain
repeated (1): middleware/csrf/csrf.go#L391
undefined: subdomain
repeated (1): middleware/csrf/csrf.go#L91
undefined: normalizeOrigin
repeated (1): middleware/csrf/csrf.go#L80
undefined: subdomain
repeated (2): middleware/csrf/csrf.go#L391
undefined: subdomain
repeated (2): middleware/csrf/csrf.go#L91
undefined: normalizeOrigin
repeated (2): middleware/csrf/csrf.go#L80
undefined: subdomain
repeated (2): middleware/csrf/csrf_test.go#L3646
undefined: fmt
repeated (2): middleware/csrf/csrf_test.go#L3571
undefined: fmt
repeated (2): middleware/csrf/csrf.go#L427
undefined: matchSubdomainOrigin
repeated (2): middleware/csrf/csrf.go#L423
undefined: subdomain
repeated (2): middleware/csrf/csrf.go#L391
undefined: subdomain
repeated (2): middleware/csrf/csrf.go#L91
undefined: normalizeOrigin
repeated (2): middleware/csrf/csrf.go#L80
undefined: subdomain
repeated (3): middleware/csrf/csrf.go#L391
undefined: subdomain
repeated (3): middleware/csrf/csrf.go#L91
undefined: normalizeOrigin
repeated (3): middleware/csrf/csrf.go#L80
undefined: subdomain
repeated (3): middleware/csrf/csrf_test.go#L3646
undefined: fmt
repeated (3): middleware/csrf/csrf_test.go#L3571
undefined: fmt
repeated (3): middleware/csrf/csrf.go#L427
undefined: matchSubdomainOrigin
repeated (3): middleware/csrf/csrf.go#L423
undefined: subdomain
repeated (3): middleware/csrf/csrf.go#L391
undefined: subdomain
repeated (3): middleware/csrf/csrf.go#L91
undefined: normalizeOrigin
repeated (3): middleware/csrf/csrf.go#L80
undefined: subdomain