mozilla/openbadges — pull request #257 by stenington (2012-08-23 19:44:48+00:00)
Title: Modaless badge acceptance

This pull introduces another method to the issuer API: `OpenBadges.issue_no_modal(assertions)`.

Calling that method will open the issuer frame in the current tab/window instead of sticking it in an iframe, and upon completion of the acceptance process it redirects to the backpack. It does this by sticking the assertions in a form and posting to a new `issuer.frameless` endpoint.

Some security things to pay special attention to:

* Am I doing what I need to do to scrub the posted assertions?
* `issuer/frameless` is CSRF whitelisted, is that okay?