Commit graph

10 commits

Author SHA1 Message Date
Lastorder-DC
1c8ae0d766 Merge remote-tracking branch 'upstream/master' into master 2025-10-27 23:09:27 +09:00
Kijin Sung
e2124ed1c0 Refactor checkCSRF() to use Sec-Fetch-Site and Origin headers
- 최근 브라우저에서 지원하는 헤더를 사용하여 더 정확하게 체크
- Sec-Fetch-Site, Origin 헤더를 지원하지 않는 경우 기존처럼 Referer 체크
- CSRF 토큰은 더이상 기본 방법보다 보안이 더 뛰어나다고 말하기 힘듬
2025-10-22 22:53:45 +09:00
Lastorder
a40502885e
Merge branch 'rhymix:master' into master 2025-03-10 17:04:17 +09:00
Kijin Sung
f33c52b20f Cast to string before verifying untrusted input 2025-03-08 14:57:24 +09:00
Lastorder
be7bb0b7be
Update Security.php 2024-10-19 10:06:21 +09:00
Lastorder
da51d62e3d
Update Security.php 2024-10-19 09:59:56 +09:00
Kijin Sung
f8ed6da4ed Support both UUIDv4 and UUIDv7 in Security::getRandomUUID() 2023-10-03 19:22:04 +09:00
Kijin Sung
b373dc94c0 Add type hints and use class constants instead of protected properties (continued) 2023-10-03 02:55:24 +09:00
Kijin Sung
a9f72a5cd2 Remove trailing whitespace 2023-01-17 20:57:44 +09:00
Kijin Sung
0029d1a1ec Rename all common/framework source files to be case-sensitive 2022-12-26 16:13:09 +09:00
Renamed from common/framework/security.php (Browse further)