cakephp2-php8/lib/Cake/Test/Case
mark_story f23d811ff5 Use the form action URL in generated form hashes.
By including the URL in generated hash for secured forms we prevent
a class of abuse where a user uses one secured form to post into a
controller action the form was not originally intended for. These cross
action requests could potentially violate developer's mental model of
how SecurityComponent works and produce unexpected/undesirable outcomes.

Thanks to Kurita Takashi for pointing this issue out, and suggesting
a fix.
2014-04-25 22:05:58 -04:00
..
Cache correct missed cs errors 2014-04-02 03:16:03 +02:00
Configure Removed "PHP 5" from file header DocBlocks 2013-11-13 22:58:39 +01:00
Console more missing doc block tags added 2014-04-02 03:02:37 +02:00
Controller Use the form action URL in generated form hashes. 2014-04-25 22:05:58 -04:00
Core more missing doc block tags added 2014-04-02 03:02:37 +02:00
Error more missing doc block tags added 2014-04-02 03:02:37 +02:00
Event Removed "PHP 5" from file header DocBlocks 2013-11-13 22:58:39 +01:00
I18n Removed "PHP 5" from file header DocBlocks 2013-11-13 22:58:39 +01:00
Log correct missed cs errors 2014-04-02 03:16:03 +02:00
Model more missing doc block tags added 2014-04-02 03:02:37 +02:00
Network Reject file paths containing ... 2014-04-23 22:20:14 -04:00
Routing more missing doc block tags added 2014-04-02 03:02:37 +02:00
TestSuite more missing doc block tags added 2014-04-02 03:02:37 +02:00
Utility change parameter order 2014-04-24 12:54:45 +02:00
View Use the form action URL in generated form hashes. 2014-04-25 22:05:58 -04:00
AllBehaviorsTest.php Removed "PHP 5" from file header DocBlocks 2013-11-13 22:58:39 +01:00
AllCacheTest.php Removed "PHP 5" from file header DocBlocks 2013-11-13 22:58:39 +01:00
AllComponentsTest.php Removed "PHP 5" from file header DocBlocks 2013-11-13 22:58:39 +01:00
AllConfigureTest.php Removed "PHP 5" from file header DocBlocks 2013-11-13 22:58:39 +01:00
AllConsoleTest.php Removed "PHP 5" from file header DocBlocks 2013-11-13 22:58:39 +01:00
AllControllerTest.php Removed "PHP 5" from file header DocBlocks 2013-11-13 22:58:39 +01:00
AllCoreTest.php Removed "PHP 5" from file header DocBlocks 2013-11-13 22:58:39 +01:00
AllDatabaseTest.php Removed "PHP 5" from file header DocBlocks 2013-11-13 22:58:39 +01:00
AllDbRelatedTest.php Removed "PHP 5" from file header DocBlocks 2013-11-13 22:58:39 +01:00
AllErrorTest.php Removed "PHP 5" from file header DocBlocks 2013-11-13 22:58:39 +01:00
AllEventTest.php Removed "PHP 5" from file header DocBlocks 2013-11-13 22:58:39 +01:00
AllHelpersTest.php Removed "PHP 5" from file header DocBlocks 2013-11-13 22:58:39 +01:00
AllI18nTest.php Removed "PHP 5" from file header DocBlocks 2013-11-13 22:58:39 +01:00
AllLogTest.php Removed "PHP 5" from file header DocBlocks 2013-11-13 22:58:39 +01:00
AllNetworkTest.php Removed "PHP 5" from file header DocBlocks 2013-11-13 22:58:39 +01:00
AllRoutingTest.php Removed "PHP 5" from file header DocBlocks 2013-11-13 22:58:39 +01:00
AllTestsTest.php Removed "PHP 5" from file header DocBlocks 2013-11-13 22:58:39 +01:00
AllTestSuiteTest.php Removed "PHP 5" from file header DocBlocks 2013-11-13 22:58:39 +01:00
AllUtilityTest.php Removed "PHP 5" from file header DocBlocks 2013-11-13 22:58:39 +01:00
AllViewTest.php Removed "PHP 5" from file header DocBlocks 2013-11-13 22:58:39 +01:00
BasicsTest.php Merge pull request #2350 from tuffz/formatting_app_uses_blocks 2013-12-14 12:37:02 -08:00