irdc 4b76bc5b32 Use a HMAC to sign and validate CSRF tokens, instead of generating random ones and storing them in the session data ...

* Use a HMAC to sign and validate CSRF tokens, instead of generating random
ones and storing them in the session data. Reduces number of writes to
sessions table and fixes kanboard issue #4942.
* Added missing CSRF check for starting/stopping subtask timers.

Co-authored-by: Willemijn Coene <willemijn@irdc.nl>

2022-09-17 17:23:41 -07:00

..

Action

Kanboard now requires PHP >= 7.2 since other versions are deprecated

2020-01-14 12:02:31 -08:00

Cache

PHP 8 Compatibility

2022-02-05 11:49:03 -08:00

Event

Improve Automatic Actions plugin api

2016-01-03 16:43:13 -05:00

ExternalLink

Kanboard now requires PHP >= 7.2 since other versions are deprecated

2020-01-14 12:02:31 -08:00

ExternalTask

Kanboard now requires PHP >= 7.2 since other versions are deprecated

2020-01-14 12:02:31 -08:00

Filter

Add unit test for PR #2766

2017-02-05 12:59:39 -05:00

Group

Rename all models

2016-05-28 19:48:22 -04:00

Http

PHP 8 Compatibility

2022-02-05 11:49:03 -08:00

Ldap

PHP 8 Compatibility

2022-02-05 11:49:03 -08:00

ObjectStorage

PHP 8 Compatibility

2022-02-05 11:49:03 -08:00

Plugin

PHP 8 Compatibility

2022-02-05 11:49:03 -08:00

Security

Use a HMAC to sign and validate CSRF tokens, instead of generating random ones and storing them in the session data

2022-09-17 17:23:41 -07:00

Session

Store PHP sessions in the database

2017-12-12 15:04:28 -08:00

User

PHP 8 Compatibility

2022-02-05 11:49:03 -08:00

CsvTest.php

Add new boolean value for CSV import

2015-12-13 11:12:03 -05:00

DateParserTest.php

Update SQL exports

2017-01-28 11:37:43 -05:00

HelperTest.php

Helper refactoring

2016-03-04 20:10:34 -05:00

TemplateTest.php

Use PLUGINS_DIR constant to load plugin templates

2016-04-24 14:46:18 -04:00

TranslatorTest.php

PHP 8 Compatibility

2022-02-05 11:49:03 -08:00