 Tadahisa Motooka
|
7b0f7664e2
Use default value if samesite is not set
|
5 years ago |
 ADmad
|
ac0c6aeb3a
Add support for "SameSite" attribute for CSRF protection cookies.
|
5 years ago |
 Mark Story
|
a08c3a78de
Fix missing typechecks in SecurityComponent and CsrfProtectionMiddleware
|
5 years ago |
 mscherer
|
d397fbdcc8
Fix CS as per PSR-12.
|
6 years ago |
|
mscherer
|
a6b53b0789
Fix array typehints to be more precise, string array check strictness
|
6 years ago |
|
ADmad
|
c717ca4275
Update docblocks
|
6 years ago |
|
ADmad
|
95af9f3804
Allow request whitelisting in CsrfProtectionMiddleware.
|
6 years ago |
|
Mark Story
|
8d72a2d443
Merge branch 'master' into 3.next
|
7 years ago |
|
Mark Story
|
f8fb7b61ca
Clarify configuration options for CsrfProtectionMiddleware
|
7 years ago |
 David Yell
|
406dce8fe6
Updated the test cases to remove deprecated usage of the withCookie method
|
7 years ago |
|
Mark Story
|
87bab29eb2
Make CSRF token comparisions time constant.
|
8 years ago |
|
ADmad
|
a094cde88d
Merge branch 'master' into 3.next
|
8 years ago |
|
ADmad
|
e475be71ee
Fix errors reported by phpstan.
|
8 years ago |
|
Mark Story
|
7a5e33348c
Update uses of HttpExceptions.
|
8 years ago |
|
ADmad
|
c273a023ee
Update typehints.
|
8 years ago |
 Florian Krämer
|
5ecaee22f7
Updating a doc block in CsrfProtectionMiddleware
|
9 years ago |
|
Florian Krämer
|
a068e23874
Adding typehints to CsrfProtectionMiddleware::_addTokenCookie()
|
9 years ago |
|
Florian Krämer
|
f2f3752b59
Changing doc block of CsrfProtectionMiddleware::__invoke()
|
9 years ago |
|
Mark Story
|
1c06522700
Fix phpcs error.
|
9 years ago |
|
Mark Story
|
464f927827
Stick to the interface methods.
|
9 years ago |
|
Mark Story
|
00c6160b0e
Stop using pass by ref and use smaller methods.
|
9 years ago |
|
ADmad
|
f5996c3e84
Remove cheeck for "requestAction()" requests.
|
9 years ago |
|
ADmad
|
80208ca4d8
Don't pass by reference.
|
9 years ago |
|
ADmad
|
12fc9b13ae
Update docblocks.
|
9 years ago |
|
Florian Krämer
|
f25aa4308d
Adding more tests for the CsrfProtectionMiddleware
|
9 years ago |
|
Florian Krämer
|
0fa62a6efc
Adding tests for the CsrfProtectionMiddleware
|
9 years ago |
|
Florian Krämer
|
b0877b9597
Adding tests for the CSRF middleware
|
9 years ago |
|
Florian Krämer
|
fe1c6432c6
Started on turning the CSRF component into a middleware
|
9 years ago |
