Go to file

irdc 4b76bc5b32 Use a HMAC to sign and validate CSRF tokens, instead of generating random ones and storing them in the session data

* Use a HMAC to sign and validate CSRF tokens, instead of generating random
ones and storing them in the session data. Reduces number of writes to
sessions table and fixes kanboard issue #4942.
* Added missing CSRF check for starting/stopping subtask timers.

Co-authored-by: Willemijn Coene <willemijn@irdc.nl>

2022-09-17 17:23:41 -07:00

.github

Rename default branch from master to main

2022-08-11 21:57:19 -07:00

app

Use a HMAC to sign and validate CSRF tokens, instead of generating random ones and storing them in the session data

2022-09-17 17:23:41 -07:00

assets

fix re-opening dropdown-menu

2022-09-16 18:05:53 -07:00

data

IIS secure

2016-03-07 12:06:57 +01:00

docker

Update Docker image to PHP 8.1

2022-09-04 15:02:56 -07:00

libs

Fix various compatibility issues with PHP 8

2022-02-08 22:20:20 -08:00

plugins

Cosmetic fixes

2015-10-19 21:32:18 -04:00

tests

Use a HMAC to sign and validate CSRF tokens, instead of generating random ones and storing them in the session data

2022-09-17 17:23:41 -07:00

vendor

Regenerate Composer auto-loader

2022-09-04 22:13:36 -07:00

.dockerignore

Tweak Docker image for PHP 8

2022-02-09 20:08:29 -08:00

.gitattributes

Do not bundle ChangeLog into Git archive

2022-02-09 20:16:02 -08:00

.gitignore

Tweak Docker image for PHP 8

2022-02-09 20:08:29 -08:00

.htaccess

When forcing HTTPS, handle subfolder URLs properly

2018-07-23 12:49:14 -07:00

ChangeLog

Updated ChangeLog

2022-09-04 22:19:39 -07:00

cli

Simplify .htaccess and rename command line script

2016-11-29 20:26:18 -05:00

composer.json

Bump phpunit/phpunit from 9.5.23 to 9.5.24

2022-09-05 15:33:30 -07:00

composer.lock

Bump phpunit/phpunit from 9.5.23 to 9.5.24

2022-09-05 15:33:30 -07:00

config.default.php

config.php.default: clarify meaning of LDAP_USER_CREATION

2021-11-08 19:57:11 -08:00

docker-compose.yml

Update docker-compose.yml to reflect changes in PR #3830

2018-04-30 11:39:16 -07:00

Dockerfile

Update Docker image to PHP 8.1

2022-09-04 15:02:56 -07:00

favicon.ico

Cleanup and minor fixes

2015-10-19 21:05:41 -04:00

index.php

Refactoring: added controlled middleware and changed response class

2016-05-15 18:31:47 -04:00

jsonrpc.php

Update JsonRPC library and API

2016-05-29 20:12:02 -04:00

LICENSE

PHP 8 Compatibility

2022-02-05 11:49:03 -08:00

Makefile

Rename master to main in Makefile

2022-09-04 13:51:07 -07:00

README.md

Rename default branch from master to main

2022-08-11 21:57:19 -07:00

robots.txt

First commit

2014-01-25 14:56:02 -05:00

SECURITY.md

Add missing CSRF checks

2021-06-05 14:59:12 -07:00

Vagrantfile

Update Vagrantfile to Ubuntu 20.04

2020-05-20 18:10:53 -07:00

web.config

Update IIS config file

2016-06-29 22:21:59 -04:00

README.md

Kanboard

Kanboard is project management software that focuses on the Kanban methodology.

This software is in maintenance mode. It doesn't mean it's abandoned, but there is no significant feature development. Pull-requests are still accepted as long as the guidelines are followed.

Official website: https://kanboard.org/
List of features
Change Log
Forum
Official documentation: https://docs.kanboard.org/

Credits

Main developer: Frédéric Guillot
Contributors
Distributed under MIT License