Changesets: MantisBT
|
master-1.2.x 59498710 2009-07-06 10:38 Details Diff |
Add CSRF protection for bug_file_delete | ||
| mod - bug_file_delete.php | Diff File | ||
| mod - core/print_api.php | Diff File | ||
|
master-1.2.x 88b4537d 2009-07-06 10:19 Details Diff |
Add CSRF protection for bug_assign_reporter | ||
| mod - bug_assign_reporter.php | Diff File | ||
|
master-1.2.x 2e3c614a 2009-07-06 10:16 Details Diff |
Add CSRF protection for adm_config_delete | ||
| mod - adm_config_delete.php | Diff File | ||
|
master-1.2.x a45d0ef5 2009-07-06 10:12 Details Diff |
Add CSRF protection to print_button function As an additional note for this patch, we should ideally be sending parameters to this function via $p_args_to_post where those parameters are being used to change the state of Mantis. At the moment a form security token is created for every call of print_button whereas we really only need to do it when !empty($p_args_to_post). This requires a bit of extra work outside the scope of this patch, and almost all uses of print_button are to modify Mantis in some way, hence this partial fix. |
||
| mod - manage_proj_edit_page.php | Diff File | ||
| mod - manage_proj_page.php | Diff File | ||
| mod - core/print_api.php | Diff File | ||
|
master-1.2.x 948f0b89 2009-07-06 09:12 Details Diff |
CSRF protection not needed in filter_api | ||
| mod - core/filter_api.php | Diff File | ||
|
master-1.2.x 151ff562 2009-07-06 09:09 Details Diff |
CSRF protection not needed for action confirmation step | ||
| mod - core/helper_api.php | Diff File | ||
|
master-1.2.x 2e5da604 2009-07-06 09:04 Details Diff |
CSRF protection not needed for bug_change_status_page | ||
| mod - core/html_api.php | Diff File | ||
|
master-1.2.x 23c2f765 2009-07-06 09:03 Details Diff |
CSRF protection not needed for set_project | ||
| mod - core/html_api.php | Diff File | ||
|
master-1.2.x bc480a19 2009-07-06 09:01 Details Diff |
CSRF protection not needed for login/reauthentication | ||
| mod - core/authentication_api.php | Diff File | ||
| mod - login_page.php | Diff File | ||
|
master-1.2.x 20d9284c 2009-07-06 08:03 Details Diff |
CSRF protection not needed for set_project | ||
| mod - login_select_proj_page.php | Diff File | ||
|
master-1.2.x 875e2320 2009-07-06 07:58 Details Diff |
Cleanup form token usage on manage_proj_edit_page | ||
| mod - manage_proj_edit_page.php | Diff File | ||
|
master-1.2.x 9cd32f8c 2009-07-06 07:55 Details Diff |
Add CSRF protection for plugin_xml_import_action | ||
| mod - plugins/XmlImportExport/pages/import.php | Diff File | ||
| mod - plugins/XmlImportExport/pages/import_action.php | Diff File | ||
|
master-1.2.x f1b399d4 2009-07-06 07:47 Details Diff |
Add CSRF protection for print_all_bug_options_reset | ||
| mod - print_all_bug_options_reset.php | Diff File | ||
| mod - print_all_bug_options_inc.php | Diff File | ||
|
master-1.2.x b4706981 2009-07-06 07:46 Details Diff |
Add CSRF protection for print_all_bug_options_update | ||
| mod - print_all_bug_options_inc.php | Diff File | ||
| mod - print_all_bug_options_update.php | Diff File | ||
|
master-1.2.x 2fe3ee52 2009-07-06 07:43 Details Diff |
CSRF protection not needed for print_all_bug_page | ||
| mod - print_all_bug_page.php | Diff File | ||
|
master-1.2.x f6654b05 2009-07-06 07:42 Details Diff |
CSRF protection not needed for view_all_set | ||
| mod - print_all_bug_page.php | Diff File | ||
|
master-1.2.x 9590cfc8 2009-07-06 07:37 Details Diff |
CSRF protection not needed for view_all_set | ||
| mod - view_filters_page.php | Diff File | ||
|
master-1.2.x c6b411f5 2009-07-06 07:21 Details Diff |
CSRF protection not needed for bug_actiongroup_page | ||
| mod - view_all_inc.php | Diff File | ||
|
master-1.2.x 0fe39ae2 2009-07-06 07:08 Details Diff |
CSRF protection not needed for tag_update_page | ||
| mod - tag_view_page.php | Diff File | ||
|
master-1.2.x 99926209 2009-07-06 07:07 Details Diff |
Add CSRF protection for query_store | ||
| mod - query_store_page.php | Diff File | ||
| mod - query_store.php | Diff File | ||
|
master-1.2.x 3f2376be 2009-07-06 07:04 Details Diff |
Add CSRF protection for query_delete | ||
| mod - query_delete_page.php | Diff File | ||
| mod - query_delete.php | Diff File | ||
|
master-1.2.x 434cc487 2009-07-06 07:00 Details Diff |
Add CSRF protection for proj_doc_delete | ||
| mod - proj_doc_delete.php | Diff File | ||
| mod - proj_doc_edit_page.php | Diff File | ||
|
master-1.2.x f41bc3d6 2009-07-06 06:50 Details Diff |
Add CSRF protection for proj_doc_update | ||
| mod - proj_doc_edit_page.php | Diff File | ||
| mod - proj_doc_update.php | Diff File | ||
|
master-1.2.x 3fee4564 2009-07-06 06:43 Details Diff |
Add CSRF protection for proj_doc_add | ||
| mod - proj_doc_add.php | Diff File | ||
| mod - proj_doc_add_page.php | Diff File | ||
|
master-1.2.x 5e175e3e 2009-07-06 04:37 Details Diff |
Add CSRF protection for plugin_graph_config_edit | ||
| mod - plugins/MantisGraph/pages/config.php | Diff File | ||
| mod - plugins/MantisGraph/pages/config_edit.php | Diff File | ||