Skip to main content

Crate pma_web

Crate pma_web 

Source
Expand description

pma web: the TUI’s views and actions in a browser, strictly local.

It listens on 127.0.0.1 only, at a random port, behind a random token made at each launch. The page trades the token for an HttpOnly, SameSite=Strict cookie, and every data request needs that cookie. Each request’s Host must be a loopback name, against DNS rebinding; any port is taken, so an SSH forward to another local port works. Each POST must come from the origin its own Host names and send JSON, against cross-site requests. Rows, keys and actions come from pma_core::screen and pma_core::keys, as the TUI’s do. Design: docs/dev/frontends.md.

Structs§

Server

Functions§

open_app
Opens the page in a Chrome or Chromium window with no browser controls: an app window, from the first such browser found.
open_browser
Opens the page in the user’s browser, without waiting for it.