 Mark Story
|
668c087398
Merge branch 'master' into 3.next
|
8 years ago |
 Marc Würth
|
3a6bd75832
Use HTTPS for the opensource.org URL
|
8 years ago |
|
Marc Würth
|
c61ab5ee95
Use HTTPS for the cakefoundation.org URL
|
8 years ago |
|
Marc Würth
|
4c774ce4b7
Use HTTPS for the cakephp.org URL
|
8 years ago |
 Florian Krämer
|
b0877b9597
Adding tests for the CSRF middleware
|
9 years ago |
 saeid
|
69dcc12201
use Cake\Http\ServerRequest on tests
|
9 years ago |
|
saeid
|
56965febc4
use new response class within tests
|
9 years ago |
 antograssiot
|
ad124a3260
fix malformed dataproviders
|
9 years ago |
 ADmad
|
d00d7fdfe0
Remove use of TestCase::getMock() from "Controller" namepace tests.
|
9 years ago |
|
Mark Story
|
e0f42abbb4
Tighten up CSRF Component restrictions.
|
10 years ago |
|
Mark Story
|
322ebd4997
Add tests for idempotent methods and CSRF tokens.
|
10 years ago |
|
Mark Story
|
0f818a23a8
Only allow GET, HEAD, OPTIONS to not have CSRF tokens.
|
10 years ago |
|
Mark Story
|
f7f5e21d80
Add option to make CSRF Token HttpOnly.
|
10 years ago |
|
ADmad
|
5f76c1c30e
Unset CSRF token from request data after token validation.
|
10 years ago |
 Schlaefer
|
dbf618556c
added better and missing wording on CSRF expiry
|
10 years ago |
|
Schlaefer
|
3653d54366
Allow relative time values in CSRF-cookie
|
10 years ago |
 Jose Lorenzo Rodriguez
|
7aded681a0
Merge branch 'master' into 3.1
|
10 years ago |
|
Schlaefer
|
22dae85691
fix cookie expire value from CsrfComponent not used
|
10 years ago |
 Tigran Gabrielyan
|
fb5a79e530
Added InvalidCsrfTokenException. Implements #6546
|
10 years ago |
|
Mark Story
|
522ed2f1fb
Fix CSRF validation failure.
|
11 years ago |
 Bryan Crowe
|
be845a3a01
Run phpcbf for PSR2 CS fixers
|
11 years ago |
 euromark
|
fa81c17a28
Correct casing of method name.
|
11 years ago |
|
ADmad
|
2f3d50b355
Set default cookie path to webroot instead of base.
|
11 years ago |
 Guy Warner
|
26b9d9449a
Add @trigger to functions docs when event added
|
11 years ago |
|
mark_story
|
5d203b4c08
Add deprecated warning for deprecated method.
|
11 years ago |
|
Jose Lorenzo Rodriguez
|
512d385b4e
Fixing some failing unit tests
|
11 years ago |
|
Bryan Crowe
|
042bd19776
Use semantic version for test cases since doc block
|
12 years ago |
 ndm2
|
6c32004206
Make the wannabe fully qualified namespaces in docblock tags actually fully qualified by adding leading backslashes.
|
12 years ago |
|
ADmad
|
fb72c03b4c
Renamed folders "Cake" to "src" and "Test" to "tests".
|
12 years ago |
