Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CSRF Fixes and Remote Code Execution Prevention #1634

Merged
merged 10 commits into from
Jul 19, 2021
Merged

CSRF Fixes and Remote Code Execution Prevention #1634

merged 10 commits into from
Jul 19, 2021

Commits on Jun 29, 2020

  1. begin work on csrf fixes

    @Ngai-E
    Ngai-E committed Jun 29, 2020
    Configuration menu
    Copy the full SHA
    60b0f36 View commit details
    Browse the repository at this point in the history

Commits on Jul 2, 2020

  1. Created CsrfToken class

    @maggienegm
    maggienegm committed Jul 2, 2020
    Configuration menu
    Copy the full SHA
    7633825 View commit details
    Browse the repository at this point in the history

Commits on Jul 15, 2020

  1. fix remote code execution in on history and import template modules

    @Ngai-E
    Ngai-E committed Jul 15, 2020
    Configuration menu
    Copy the full SHA
    a7102ca View commit details
    Browse the repository at this point in the history

Commits on Aug 1, 2020

  1. Added csrf protection in vulnerable files with forms

    @maggienegm
    maggienegm committed Aug 1, 2020
    Configuration menu
    Copy the full SHA
    c702fa1 View commit details
    Browse the repository at this point in the history

Commits on Aug 3, 2020

  1. Type cast input for hash_hmac()

    @maggienegm
    maggienegm committed Aug 3, 2020
    Configuration menu
    Copy the full SHA
    40372c0 View commit details
    Browse the repository at this point in the history

Commits on Aug 8, 2020

  1. fix remote code execution vulnerabilities system

    @Ngai-E
    Ngai-E committed Aug 8, 2020
    Configuration menu
    Copy the full SHA
    381004f View commit details
    Browse the repository at this point in the history

  2. fix csrf vulnerabilities

    @Ngai-E
    Ngai-E committed Aug 8, 2020
    Configuration menu
    Copy the full SHA
    728bf9f View commit details
    Browse the repository at this point in the history

Commits on Aug 10, 2020

  1. fix Remote code execution in Misc->New Documents

    @Ngai-E
    Ngai-E committed Aug 10, 2020
    Configuration menu
    Copy the full SHA
    6c10e1f View commit details
    Browse the repository at this point in the history

  2. fix csrf issues

    @Ngai-E
    Ngai-E committed Aug 10, 2020
    Configuration menu
    Copy the full SHA
    b685a0c View commit details
    Browse the repository at this point in the history

Commits on Aug 13, 2020

  1. Arbitrary File Actions in import_template.php, make ajax csrf token t… 

    …o be a string, add csrf token to template import
    @Ngai-E
    Ngai-E committed Aug 13, 2020
    Configuration menu
    Copy the full SHA
    9cf84f6 View commit details
    Browse the repository at this point in the history