mark_story f23d811ff5 Use the form action URL in generated form hashes. ... By including the URL in generated hash for secured forms we prevent a class of abuse where a user uses one secured form to post into a controller action the form was not originally intended for. These cross action requests could potentially violate developer's mental model of how SecurityComponent works and produce unexpected/undesirable outcomes. Thanks to Kurita Takashi for pointing this issue out, and suggesting a fix.		2014-04-25 22:05:58 -04:00
..
CacheHelperTest.php	Removed "PHP 5" from file header DocBlocks	2013-11-13 22:58:39 +01:00
FormHelperTest.php	Use the form action URL in generated form hashes.	2014-04-25 22:05:58 -04:00
HtmlHelperTest.php	more missing doc block tags added	2014-04-02 03:02:37 +02:00
JqueryEngineHelperTest.php	Removed "PHP 5" from file header DocBlocks	2013-11-13 22:58:39 +01:00
JsHelperTest.php	Fix verification of expected invocations #2919	2014-03-01 19:06:17 +01:00
MootoolsEngineHelperTest.php	Removed "PHP 5" from file header DocBlocks	2013-11-13 22:58:39 +01:00
NumberHelperTest.php	more missing doc block tags added	2014-04-02 03:02:37 +02:00
PaginatorHelperTest.php	Removed "PHP 5" from file header DocBlocks	2013-11-13 22:58:39 +01:00
PrototypeEngineHelperTest.php	Removed "PHP 5" from file header DocBlocks	2013-11-13 22:58:39 +01:00
RssHelperTest.php	Fix tests even better than before.	2013-11-21 22:57:50 -05:00
SessionHelperTest.php	Removed "PHP 5" from file header DocBlocks	2013-11-13 22:58:39 +01:00
TextHelperTest.php	Fix auto linking urls with subdomain with underscore.	2014-04-25 22:28:34 +05:30
TimeHelperTest.php	more missing doc block tags added	2014-04-02 03:02:37 +02:00