Clone Tools
  • last updated a few seconds ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
LDEV-4932 Adding CSRF to Share resources

Adding CSRF prevention to hide/show toggle in monitor

  1. … 6 more files in changeset.
LDEV-4932 Adding CSRF protection to Notebook

Prevents CSRF attacks for monitors adding comments to students' notebook entries.

  1. … 1 more file in changeset.
LDEV-4932 Add CSRF to Leader selection

Prevent CSRF for changing leader selection in monitor

  1. … 5 more files in changeset.
LDEV-4932 Add CSRF prevention for changing marks in MCQ

Add CSRF prevention for changing marks in MCQ

  1. … 2 more files in changeset.
LDEV-4932 Add CSRF prevention for monitor Image gallery

CSRF prevention for Monitor actions:

- toogle visibility

- add image

- edit image properties

  1. … 8 more files in changeset.
LDEV-4932 Forum CSRF update marks in monitor

Add CSRF prevention on Forum update marks

  1. … 2 more files in changeset.
LDEV-4932 Secure edit in monitor with CSRF Guard

  1. … 2 more files in changeset.
LDEV-4932 Secure setting submission deadline with CSRF Guard

  1. … 63 more files in changeset.
LDEV-4932 Introduce CSRF Guard to Forum. Secure authoring.

  1. … 5 more files in changeset.
LDEV-4932 CSRF Guard configuration is needed only in one place

  1. … 1 more file in changeset.
LDEV-4932 List actions to protect instead of checking everything

  1. … 1 more file in changeset.
Revert "LDEV-4932 Initial integration of CSRF Guard"

This reverts commit c5a709e4cb42d0729ad3fbd814714fb27dd844df.

It should have been in a separate branch.

  1. … 9 more files in changeset.
LDEV-4932 Initial integration of CSRF Guard

Add library and configuration file. Only Edit Profile form has a token

injected into form. Other POSTed forms will be stopped by the Guard,

with an error logged.

    • -0
    • +3
    ./Owasp.CsrfGuard.properties
  1. … 9 more files in changeset.
LDEV-4932 Initial integration of CSRF Guard

Add library and configuration file. Only Edit Profile form has a token

injected into form. Other POSTed forms will be stopped by the Guard,

with an error logged.

    • -0
    • +3
    ./Owasp.CsrfGuard.properties
  1. … 9 more files in changeset.