rhymix/tests/unit/framework
Kijin Sung e423cba24d Use Origin header before Referer to check CSRF
OWASP에서는 Referer 헤더보다 Origin 헤더를 먼저 체크하는 것을 권장합니다.
Referer가 비어 있는 경우에도 Origin 헤더에는 유용한 정보가 들어 있을 수 있기 때문입니다.

https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html
2021-02-23 16:51:46 +09:00
..
filters Add option to exclude multimedia files from direct download #1207 2020-03-23 01:52:57 +09:00
helpers Fix missing variables in ConfigHelperTest 2021-01-29 00:42:25 +09:00
parsers Add 'ifvar' attribute to most query elements 2021-02-09 21:58:07 +09:00
CacheTest.php Provide incr() and decr() as static methods of Cache class 2020-12-15 02:13:38 +09:00
CalendarTest.php Add Calendar class 2016-03-17 16:22:18 +09:00
ConfigTest.php Revert "Fix var_export() not working for stdClass in PHP < 7.3" 2018-12-13 18:59:27 +09:00
DateTimeTest.php Fix remainder of unit test warnings in PHP 8.0 2021-01-29 00:36:24 +09:00
DBTest.php Update unit tests for latest codeception 2021-01-28 21:53:44 +09:00
DebugTest.php Update unit tests for latest codeception 2021-01-28 21:53:44 +09:00
FormatterTest.php Accommodate formatter changes 2021-01-06 21:50:27 +09:00
i18nTest.php Add functions for converting between country codes and calling codes 2020-03-18 21:02:23 +09:00
KoreaTest.php Improve validation and formatting for 0303 and 0505 phone numbers 2019-05-13 15:34:09 +09:00
LangTest.php Fix Context::loadLang() compatibility when lang.xml is specified 2017-05-05 11:47:22 +09:00
MailTest.php Use egulias/EmailValidator to validate email addresses 2018-10-18 14:16:12 +09:00
MIMETest.php MIME 타입과 지원 확장자 수정 2019-10-04 01:12:19 +09:00
PaginationTest.php Update unit tests for latest codeception 2021-01-28 21:53:44 +09:00
PasswordTest.php Add more algorithms to unit test 2016-03-13 23:56:04 +09:00
RouterTest.php Fix various warnings in PHP 8.0 2021-01-28 22:32:56 +09:00
SecurityTest.php Use Origin header before Referer to check CSRF 2021-02-23 16:51:46 +09:00
SessionTest.php Fix various warnings in PHP 8.0 2021-01-28 22:32:56 +09:00
SMSTest.php Fix remainder of unit test warnings in PHP 8.0 2021-01-29 00:36:24 +09:00
StorageTest.php Update unit tests for latest codeception 2021-01-28 21:53:44 +09:00
TimerTest.php Fix timer tests on HHVM 2016-03-20 10:04:03 +09:00
UATest.php Add unit tests for UA::getColorScheme() and UA::setColorScheme() 2020-12-13 20:00:53 +09:00
URLTest.php Remove invalid characters from REQUEST_URI 2018-07-31 19:08:02 +09:00