Go to file
irdc 4b76bc5b32
Use a HMAC to sign and validate CSRF tokens, instead of generating random ones and storing them in the session data
* Use a HMAC to sign and validate CSRF tokens, instead of generating random
ones and storing them in the session data. Reduces number of writes to
sessions table and fixes kanboard issue #4942.
* Added missing CSRF check for starting/stopping subtask timers.

Co-authored-by: Willemijn Coene <willemijn@irdc.nl>
2022-09-17 17:23:41 -07:00
.github Rename default branch from master to main 2022-08-11 21:57:19 -07:00
app Use a HMAC to sign and validate CSRF tokens, instead of generating random ones and storing them in the session data 2022-09-17 17:23:41 -07:00
assets fix re-opening dropdown-menu 2022-09-16 18:05:53 -07:00
data IIS secure 2016-03-07 12:06:57 +01:00
docker Update Docker image to PHP 8.1 2022-09-04 15:02:56 -07:00
libs Fix various compatibility issues with PHP 8 2022-02-08 22:20:20 -08:00
plugins Cosmetic fixes 2015-10-19 21:32:18 -04:00
tests Use a HMAC to sign and validate CSRF tokens, instead of generating random ones and storing them in the session data 2022-09-17 17:23:41 -07:00
vendor Regenerate Composer auto-loader 2022-09-04 22:13:36 -07:00
.dockerignore Tweak Docker image for PHP 8 2022-02-09 20:08:29 -08:00
.gitattributes Do not bundle ChangeLog into Git archive 2022-02-09 20:16:02 -08:00
.gitignore Tweak Docker image for PHP 8 2022-02-09 20:08:29 -08:00
.htaccess When forcing HTTPS, handle subfolder URLs properly 2018-07-23 12:49:14 -07:00
ChangeLog Updated ChangeLog 2022-09-04 22:19:39 -07:00
Dockerfile Update Docker image to PHP 8.1 2022-09-04 15:02:56 -07:00
LICENSE PHP 8 Compatibility 2022-02-05 11:49:03 -08:00
Makefile Rename master to main in Makefile 2022-09-04 13:51:07 -07:00
README.md Rename default branch from master to main 2022-08-11 21:57:19 -07:00
SECURITY.md Add missing CSRF checks 2021-06-05 14:59:12 -07:00
Vagrantfile Update Vagrantfile to Ubuntu 20.04 2020-05-20 18:10:53 -07:00
cli Simplify .htaccess and rename command line script 2016-11-29 20:26:18 -05:00
composer.json Bump phpunit/phpunit from 9.5.23 to 9.5.24 2022-09-05 15:33:30 -07:00
composer.lock Bump phpunit/phpunit from 9.5.23 to 9.5.24 2022-09-05 15:33:30 -07:00
config.default.php config.php.default: clarify meaning of LDAP_USER_CREATION 2021-11-08 19:57:11 -08:00
docker-compose.yml Update docker-compose.yml to reflect changes in PR #3830 2018-04-30 11:39:16 -07:00
favicon.ico Cleanup and minor fixes 2015-10-19 21:05:41 -04:00
index.php Refactoring: added controlled middleware and changed response class 2016-05-15 18:31:47 -04:00
jsonrpc.php Update JsonRPC library and API 2016-05-29 20:12:02 -04:00
robots.txt First commit 2014-01-25 14:56:02 -05:00
web.config Update IIS config file 2016-06-29 22:21:59 -04:00

README.md

Kanboard

Kanboard is project management software that focuses on the Kanban methodology.

This software is in maintenance mode. It doesn't mean it's abandoned, but there is no significant feature development. Pull-requests are still accepted as long as the guidelines are followed.

Credits