* Use a HMAC to sign and validate CSRF tokens, instead of generating random ones and storing them in the session data. Reduces number of writes to sessions table and fixes kanboard issue #4942. * Added missing CSRF check for starting/stopping subtask timers. Co-authored-by: Willemijn Coene <willemijn@irdc.nl> |
||
|---|---|---|
| .. | ||
| configs | ||
| configtest | ||
| integration | ||
| units | ||
| .htaccess | ||
| Dockerfile | ||
| integration.mysql.xml | ||
| integration.postgres.xml | ||
| integration.sqlite.xml | ||
| units.mysql.xml | ||
| units.postgres.xml | ||
| units.sqlite.xml | ||