Lastorder-DC
|
1c8ae0d766
|
Merge remote-tracking branch 'upstream/master' into master
|
2025-10-27 23:09:27 +09:00 |
|
Kijin Sung
|
e2124ed1c0
|
Refactor checkCSRF() to use Sec-Fetch-Site and Origin headers
- 최근 브라우저에서 지원하는 헤더를 사용하여 더 정확하게 체크
- Sec-Fetch-Site, Origin 헤더를 지원하지 않는 경우 기존처럼 Referer 체크
- CSRF 토큰은 더이상 기본 방법보다 보안이 더 뛰어나다고 말하기 힘듬
|
2025-10-22 22:53:45 +09:00 |
|
Lastorder
|
a40502885e
|
Merge branch 'rhymix:master' into master
|
2025-03-10 17:04:17 +09:00 |
|
Kijin Sung
|
f33c52b20f
|
Cast to string before verifying untrusted input
|
2025-03-08 14:57:24 +09:00 |
|
Lastorder
|
be7bb0b7be
|
Update Security.php
|
2024-10-19 10:06:21 +09:00 |
|
Lastorder
|
da51d62e3d
|
Update Security.php
|
2024-10-19 09:59:56 +09:00 |
|
Kijin Sung
|
f8ed6da4ed
|
Support both UUIDv4 and UUIDv7 in Security::getRandomUUID()
|
2023-10-03 19:22:04 +09:00 |
|
Kijin Sung
|
b373dc94c0
|
Add type hints and use class constants instead of protected properties (continued)
|
2023-10-03 02:55:24 +09:00 |
|
Kijin Sung
|
a9f72a5cd2
|
Remove trailing whitespace
|
2023-01-17 20:57:44 +09:00 |
|
Kijin Sung
|
0029d1a1ec
|
Rename all common/framework source files to be case-sensitive
|
2022-12-26 16:13:09 +09:00 |
|