 Mark Story
|
4044e676b4
Fix TypeError in CsrfProtectionMiddleware
|
4 years ago |
|
Mark Story
|
ca2a768018
Fix phpcs
|
5 years ago |
|
Mark Story
|
ce5747de81
Fix CSRF token backwards compatibility
|
5 years ago |
|
Mark Story
|
39b48b6a6a
Salt stateless CSRF tokens as well
|
5 years ago |
 Corey Taylor
|
7013b5ed8e
Deprecate Exception::responseHeader() in favor of HttpException
|
5 years ago |
 ADmad
|
e01649deb9
Add new assertion methods added in PHP 9.
|
5 years ago |
|
Mark Story
|
01ef3564a5
Throw an error when the csrfToken attribute is already set
|
5 years ago |
|
ADmad
|
a3216cf58d
Merge branch 'master' into 4.next
|
5 years ago |
|
Mark Story
|
b579dc8b3b
Remove more whitelist usage
|
5 years ago |
|
Mark Story
|
1f30a17a64
Add missing type checks to SecurityComponent and CSRF middleware.
|
5 years ago |
|
ADmad
|
8762b2452a
Rename option "httpOnly" to "httponly" for consistency.
|
5 years ago |
|
ADmad
|
301cf4d603
Allow specifying "SameSite" attribute for CSRF protection cookie.
|
5 years ago |
 Edgaras Janušauskas
|
68a6ab436e
Update tests/TestCase/Http/Middleware/CsrfProtectionMiddlewareTest.php
|
6 years ago |
|
Edgaras Janušauskas
|
51d1aff5c8
Delete cookie with invalid CSRF token
|
6 years ago |
|
Mark Story
|
f70f533d07
Fix lint errors.
|
6 years ago |
|
Mark Story
|
1cee60b61f
Further harden CSRF token comparisons
|
6 years ago |
|
ADmad
|
0defa45cbf
Replace Zend framework packages with Laminas.
|
6 years ago |
|
Mark Story
|
64a5753870
Fix import order.
|
6 years ago |
|
Mark Story
|
3b369e2760
Fix CSRF tokens not being set on diactoros responses
|
6 years ago |
 ADmad
|
33f9c78dff
Merge pull request #13776 from CakeDC/issue/13767
|
6 years ago |
|
ADmad
|
8cc3cf9dbd
Make CookieInterface::toArray() return a flat array.
|
6 years ago |
 Jorge González
|
a713820abe
fix cs, make stan happy
|
6 years ago |
|
Jorge González
|
9657abbe89
add test
|
6 years ago |
|
ADmad
|
2e307adf92
Update CsrfProtectionMiddleware tests related to cookies.
|
6 years ago |
|
Mark Story
|
49ca31fce4
Fix phpcs and psalm errors.
|
6 years ago |
|
Mark Story
|
cf8c548c52
First draft of http package
|
6 years ago |
|
ADmad
|
e80b025d79
Ensure csrf token is always cleared.
|
6 years ago |
|
ADmad
|
38e0f49776
Set CSRF token as separate request attribute.
|
6 years ago |
 mscherer
|
15f02f9450
Cleaner asserting for strict typehinting, lots of false positives fixed.
|
7 years ago |
|
ADmad
|
d62447834a
Merge branch '3.next' into 4.x
|
6 years ago |
