Signed-off-by: wernerfred <wernerf@fim.uni-passau.de>

Signed-off-by: Jonas Sulzer <jonas@violoncello.ch>

Fixes #12943

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Signed-off-by: Michael Weimann <mail@michael-weimann.eu>

Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>

Because the redirect from the SAML/SSO endpoint is a POST the lax/strict
cookies are not properly send.

Note that it is not strictly requried on this endpoint as we do not need
the remember me data. Only the real session info is enough. The endpoint
is also already protected by a state token.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Disabled buttons use the default cursor, but as the cursor property for
primary buttons is set after the cursor property for disabled buttons
the latter is always overridden, even if the primary button is also
disabled. Due to this it is necessary to explicitly set the default
cursor for disabled primary buttons.

Signed-off-by: Daniel Calviño Sánchez <danxuliu@gmail.com>

Since we do no longer allow to compile handlebars online because of the
CSP anyway. it makes sense to also move away from the full handlebars
suite 71kb vs 14kb

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

Signed-off-by: Michael Weimann <mail@michael-weimann.eu>

Signed-off-by: Michael Weimann <mail@michael-weimann.eu>

Signed-off-by: Morris Jobke <hey@morrisjobke.de>