Kijin Sung e423cba24d Use Origin header before Referer to check CSRF ... OWASP에서는 Referer 헤더보다 Origin 헤더를 먼저 체크하는 것을 권장합니다. Referer가 비어 있는 경우에도 Origin 헤더에는 유용한 정보가 들어 있을 수 있기 때문입니다. https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html		2021-02-23 16:51:46 +09:00
..
_data	Add 'ifvar' attribute to most query elements	2021-02-09 21:58:07 +09:00
_support	Fix various warnings in PHP 8.0	2021-01-28 22:32:56 +09:00
install	Fix failing install test in PHP 8.0	2021-01-28 22:41:32 +09:00
unit	Use Origin header before Referer to check CSRF	2021-02-23 16:51:46 +09:00
_bootstrap.php	Use a more realistic server environment in unit tests	2016-03-16 09:13:31 +09:00
install.suite.dist.yml	Increase codeception timeout to 180s	2021-02-09 22:11:09 +09:00
unit.suite.dist.yml	Reorganize unit tests	2016-02-16 16:17:46 +09:00