oqapi/webgui
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Provide a framework for CSRF protection, with tests.

Browse source 
Add CSRF protection to Asset editSave, AssetManager, VersionTags and Group operations.
This commit is contained in:
Colin Kuskie 2009-07-06 16:58:57 +00:00
parent 4664ab7035
commit 5e4db3adb4
19 changed files with 362 additions and 62 deletions
Download patch file Download diff file Expand all files Collapse all files

1
docs/changelog/7.x.x.txt
View file

@ -2,6 +2,7 @@
- fixed #10606: shelf selector
- fixed: Have just 1 list of protected groups. Use that everywhere.
- fixed #10488: Map.gif is missing for Map wobject
- fixed #10553: WebGUI vulnerable to CSRF attacks
7.7.13
- fixed #10574: Creating Calendar Entry