AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-07-26 18:27:14 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
3524010d7ab5e75dc63619c68900f917ed40e609
itflow/functions/security.php
johnnyq 3549c2ef2a Harden CSRF handling and session cookies 
Return 403 on CSRF failure instead of a 302, which anything following
redirects records as a 200. Set SameSite=Lax at every session_start;
keepalive.php and guest_post.php had no cookie flags at all.
2026-07-24 14:06:04 -04:00

9.6 KiB
Raw Blame History

View Raw
Reference in New Issue View Git Blame Copy Permalink