Commit Graph

6 Commits

Author SHA1 Message Date
Abel Hoogeveen 22e3ec2fd0 Fixed bug #3 which caused xss_clean() to fail when calling input variables from arrays.
Closes #3.
2022-12-06 12:18:13 +01:00
Abel Hoogeveen 0e2eb5ef72
`config.web.php` already provides a prefix, so `config.security` should not provide one.
Can be merged later whenever necessary.

Also verifies if the protection is enabled or not.
2022-03-15 19:24:29 +01:00
Abel Hoogeveen c09d1a35d5 Fixed CSRF-null bug
A bug caused FuzeWorks instances to crash when CSRF protection was disabled.

This was fixed by allowing the method to return null as well.
2020-04-02 20:37:23 +02:00
Abel Hoogeveen 416d3895d0
Implemented changes requested by FuzeWorks\Application
- CSRF Verification is now functional again
- CSRF throws CSRFException
- XSS clean can now be disabled in the config globally. Once disabled, this can't be overridden
- X-Powered-By header is now always suppressed
- WebComponent now assigns global variables to the LayoutEngine.
- CSRF Exceptions can be handled by a view, if this one implements the securityExceptionHandler() method
- Error403 page added
2019-03-01 11:25:18 +01:00
Abel Hoogeveen fb733077ee
Updated minor changes. Creates version 1.2.0-RC1 2019-02-15 19:30:11 +01:00
Abel Hoogeveen eda14348b0
Implemented all basic features of WebComponent. Not release ready 2019-02-09 20:22:49 +01:00