Commits · e9c574a27c371612660efc0e1127641727d0cebb · fusiondirectory / fusiondirectory

27 Aug, 2019 1 commit
- fix(CSRF) Use a different message when CSRF token is unexpected · e9c574a2
  Côme Chilliet authored 5 years ago
```
Attempt at easing CSRF protection problems debugging.

issue #6023
```
  e9c574a2
25 Feb, 2019 1 commit
- fix(code) Code style fixes by php-cs-fixer · e7a2d4d9
  Côme Chilliet authored 6 years ago
```
Basic fixes like identation

issue #5955
```
  e7a2d4d9
19 Feb, 2019 1 commit
- fix(code) Fix code to follow new codesniffer profile · be957d07
  Côme Chilliet authored 6 years ago
```
issue #5956
```
  be957d07
05 Dec, 2018 1 commit
- fix(CSRFProtection) Split HTTP_X_FORWARDED_HOST to take only the first value · 597d64c9
  Côme Chilliet authored 6 years ago
```
If there are several proxies it may contain several values
 comma-separated

issue #5935
```
  597d64c9
13 Jun, 2018 1 commit

Merge branch '5840-security-vulnerability-cross-site-request-forgery' into '1.3-dev' · 62ffce88

Côme Chilliet authored 6 years ago

Resolve "Security Vulnerability: Cross Site Request Forgery"

See merge request fusiondirectory/fd!280

(cherry picked from commit 5edd2e32)

d8dbd130 :sparkels: feat(core) Add CSRF protection token
6e31f486  feat(core) Reject CSRF based on HEADER values
d9089973  fix(core) Remove useless line in CSRFProtection
3b51b48c  fix(core) Use FusionDirectoryException instead of Exception
1ac4c8b5  fix(core) sonar fix

62ffce88