irdc 4b76bc5b32 Use a HMAC to sign and validate CSRF tokens, instead of generating random ones and storing them in the session data ... * Use a HMAC to sign and validate CSRF tokens, instead of generating random ones and storing them in the session data. Reduces number of writes to sessions table and fixes kanboard issue #4942. * Added missing CSRF check for starting/stopping subtask timers. Co-authored-by: Willemijn Coene <willemijn@irdc.nl>		2022-09-17 17:23:41 -07:00
..
AccessMapTest.php	…
AuthenticationManagerTest.php	PHP 8 Compatibility	2022-02-05 11:49:03 -08:00
AuthorizationTest.php	…
RoleTest.php	Custom project roles inherit from project members	2016-09-08 20:44:03 -04:00
TokenTest.php	Use a HMAC to sign and validate CSRF tokens, instead of generating random ones and storing them in the session data	2022-09-17 17:23:41 -07:00