adulau/cakephp2-php8
1
0
Fork 0
mirror of https://github.com/kamilwylegala/cakephp2-php8.git synced 2025-01-31 17:16:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
cakephp2-php8/lib/Cake/Test/Case/Controller/Component
History
mark_story f23d811ff5 Use the form action URL in generated form hashes. 
By including the URL in generated hash for secured forms we prevent
a class of abuse where a user uses one secured form to post into a
controller action the form was not originally intended for. These cross
action requests could potentially violate developer's mental model of
how SecurityComponent works and produce unexpected/undesirable outcomes.

Thanks to Kurita Takashi for pointing this issue out, and suggesting
a fix.
2014-04-25 22:05:58 -04:00
..
Acl more missing doc block tags added 2014-04-02 03:02:37 +02:00
Auth more missing doc block tags added 2014-04-02 03:02:37 +02:00
AclComponentTest.php Updated documentation 2014-04-11 15:10:56 -04:00
AuthComponentTest.php Fix verification of expected invocations #2919 2014-03-01 19:06:17 +01:00
CookieComponentTest.php more missing doc block tags added 2014-04-02 03:02:37 +02:00
EmailComponentTest.php more missing doc block tags added 2014-04-02 03:02:37 +02:00
PaginatorComponentTest.php more missing doc block tags added 2014-04-02 03:02:37 +02:00
RequestHandlerComponentTest.php Removed "PHP 5" from file header DocBlocks 2013-11-13 22:58:39 +01:00
SecurityComponentTest.php Use the form action URL in generated form hashes. 2014-04-25 22:05:58 -04:00
SessionComponentTest.php Merge pull request #2449 from cakephp/fix-session-cyclic-error 2013-12-09 02:18:21 -08:00