Commit graph

6 commits

Author SHA1 Message Date
Kijin Sung
e2124ed1c0 Refactor checkCSRF() to use Sec-Fetch-Site and Origin headers
- 최근 브라우저에서 지원하는 헤더를 사용하여 더 정확하게 체크
- Sec-Fetch-Site, Origin 헤더를 지원하지 않는 경우 기존처럼 Referer 체크
- CSRF 토큰은 더이상 기본 방법보다 보안이 더 뛰어나다고 말하기 힘듬
2025-10-22 22:53:45 +09:00
Kijin Sung
f33c52b20f Cast to string before verifying untrusted input 2025-03-08 14:57:24 +09:00
Kijin Sung
f8ed6da4ed Support both UUIDv4 and UUIDv7 in Security::getRandomUUID() 2023-10-03 19:22:04 +09:00
Kijin Sung
b373dc94c0 Add type hints and use class constants instead of protected properties (continued) 2023-10-03 02:55:24 +09:00
Kijin Sung
a9f72a5cd2 Remove trailing whitespace 2023-01-17 20:57:44 +09:00
Kijin Sung
0029d1a1ec Rename all common/framework source files to be case-sensitive 2022-12-26 16:13:09 +09:00
Renamed from common/framework/security.php (Browse further)