Kijin Sung e2124ed1c0 Refactor checkCSRF() to use Sec-Fetch-Site and Origin headers ... - 최근 브라우저에서 지원하는 헤더를 사용하여 더 정확하게 체크 - Sec-Fetch-Site, Origin 헤더를 지원하지 않는 경우 기존처럼 Referer 체크 - CSRF 토큰은 더이상 기본 방법보다 보안이 더 뛰어나다고 말하기 힘듬		2025-10-22 22:53:45 +09:00
..
css	Display error count in debug panel for ajax requests	2025-08-13 21:31:17 +09:00
defaults	Add syndication module to blacklist	2025-05-14 00:23:54 +09:00
framework	Refactor checkCSRF() to use Sec-Fetch-Site and Origin headers	2025-10-22 22:53:45 +09:00
img	Remove Flash FLV player that doesn't work anymore	2021-01-08 21:02:45 +09:00
js	Remove unnecessary <br> tag from uploader error messages	2025-09-30 22:07:57 +09:00
lang	Return different "Not permitted" error message depending on what is required #2548	2025-05-22 13:20:48 +09:00
libraries	Use compoer/ca-bundle instead of using our own cacert.pem	2022-12-26 00:57:50 +09:00
manual/server_config	Block direct access to cached files in files/faceOff	2024-01-20 00:27:11 +09:00
scripts	Prevent direct access to cron.php on CLI	2025-09-09 15:30:29 +09:00
tpl	Remove all use of global variables as debug timers	2025-08-20 00:34:57 +09:00
vendor	Fix implicitly nullable type declarations in SwiftMailer	2025-09-05 15:46:49 +09:00
autoload.php	Simplify check for mbstring #2507	2025-03-05 18:53:50 +09:00
composer.json	Update copyright notice #2436	2025-03-23 20:58:28 +09:00
composer.lock	Update dependencies	2025-08-13 21:19:10 +09:00
constants.php	Version 2.1.27	2025-09-06 13:45:10 +09:00
functions.php	Fix null return value when regexp replace fails on invalid input	2025-09-20 11:34:54 +09:00
legacy.php	Fix double escaping of title when cut_str() is used on it	2025-08-07 01:32:22 +09:00