search

WaldorfConnect / portal

Central authentication and management platform - guidepost to all our services!
https://portal.waldorfconnect.de
MIT License
2 stars 0 forks source link

CSRF vulnerabilities #2

Closed linusgke closed 1 year ago

linusgke commented 1 year ago

The application might be susceptible to Cross-Site-Request-Forgery - we should have a look at that. https://www.codeigniter.com/user_guide/libraries/security.html?highlight=csrf#config-for-csrf

/**
     * List of filter aliases that are always
     * applied before and after every request.
     */
    public array $globals = [
        'before' => [
            // 'honeypot',
            // 'csrf', <--- This should be enabled!
linusgke commented 1 year ago

Done! (see https://github.com/WaldorfConnect/portal/issues/3)