Commit Graph

9 Commits

Author SHA1 Message Date
irdc 4b76bc5b32
Use a HMAC to sign and validate CSRF tokens, instead of generating random ones and storing them in the session data
* Use a HMAC to sign and validate CSRF tokens, instead of generating random
ones and storing them in the session data. Reduces number of writes to
sessions table and fixes kanboard issue #4942.
* Added missing CSRF check for starting/stopping subtask timers.

Co-authored-by: Willemijn Coene <willemijn@irdc.nl>
2022-09-17 17:23:41 -07:00
Frédéric Guillot 71123b0f37 Add missing CSRF checks 2021-06-05 14:59:12 -07:00
Frederic Guillot 3e0f14ae2b Do not expose IDs in forms 2017-09-23 20:56:54 -07:00
Frederic Guillot d915c2a96b Improve subtask toggle 2017-03-19 16:45:32 -04:00
Frederic Guillot f3deb6492a Add toggle button to show/hide subtasks in task list view 2017-02-26 19:30:02 -05:00
Frederic Guillot 24555080fd
Create new class SubtaskStatusModel 2016-07-23 21:48:59 -04:00
Frederic Guillot 14713b0ec7 Rename all models 2016-05-28 19:48:22 -04:00
Frederic Guillot 82b5b491be Rename task view controller 2016-05-26 22:23:12 -04:00
Frederic Guillot 46ed06268d Rename subtask controller 2016-05-17 22:25:18 -04:00