]> git.agnieray.net Git - galette.git/commit
Add CSRF Middleware
authorJohan Cwiklinski <johan@x-tnd.be>
Mon, 8 Nov 2021 22:36:58 +0000 (23:36 +0100)
committerJohan Cwiklinski <trasher@x-tnd.be>
Tue, 9 Nov 2021 21:54:50 +0000 (22:54 +0100)
commita5602bca2566f1be370631c3ab2d40feedd4b3ad
tree22b5b09faa4e838e1644b4db5f9077f92396834a
parentafd3c595614798032f092b3404dda56a0f8fe2ed
Add CSRF Middleware

Add csrf inputs on all forms
Use an exception rather than default blank page
Add CSRF check on ajax post requests
Make CSRF token persistent to ease with ajax calls
49 files changed:
galette/composer.json
galette/composer.lock
galette/includes/dependencies.php
galette/includes/main.inc.php
galette/lib/Galette/Middleware/SmartyCsrf.php [new file with mode: 0644]
galette/templates/default/admintools.tpl
galette/templates/default/advanced_search.tpl
galette/templates/default/ajouter_contribution.tpl
galette/templates/default/ajouter_transaction.tpl
galette/templates/default/attendance_sheet_details.tpl
galette/templates/default/change_passwd.tpl
galette/templates/default/common_scripts.tpl
galette/templates/default/config_fields.tpl
galette/templates/default/config_lists.tpl
galette/templates/default/confirm_removal.tpl
galette/templates/default/directlink.tpl
galette/templates/default/edit_paymenttype.tpl
galette/templates/default/edit_title.tpl
galette/templates/default/editer_champ.tpl
galette/templates/default/editer_intitule.tpl
galette/templates/default/export.tpl
galette/templates/default/forms_types/csrf.tpl [new file with mode: 0644]
galette/templates/default/gestion_adherents.tpl
galette/templates/default/gestion_contributions.tpl
galette/templates/default/gestion_intitules.tpl
galette/templates/default/gestion_mailings.tpl
galette/templates/default/gestion_paymentstypes.tpl
galette/templates/default/gestion_pdf_content.tpl
galette/templates/default/gestion_textes.tpl
galette/templates/default/gestion_titres.tpl
galette/templates/default/gestion_transactions.tpl
galette/templates/default/group.tpl
galette/templates/default/history.tpl
galette/templates/default/import.tpl
galette/templates/default/import_model.tpl
galette/templates/default/index.tpl
galette/templates/default/liste_membres.tpl
galette/templates/default/lostpasswd.tpl
galette/templates/default/mailing_adherents.tpl
galette/templates/default/mass_add_contribution.tpl
galette/templates/default/mass_change_members.tpl
galette/templates/default/mass_choose_type.tpl
galette/templates/default/member.tpl
galette/templates/default/plugin_initdb.tpl
galette/templates/default/preferences.tpl
galette/templates/default/reminder.tpl
galette/templates/default/saved_searches.tpl
galette/templates/default/traduire_libelles.tpl
galette/templates/default/trombinoscope.tpl