Skip to content

Fix CSRF Vulnerability

Choose a tag to compare

View all tags
@jwag956 jwag956 released this 08 Jan 19:12
3.4.5
64a7a66
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

The /login and /change endpoints allowed a GET request to return the users authentication token. That's not good.
Now, as prior to 3.3.0, only successful POSTs can return the token.

Assets 2
Loading