4 Commits

Author	SHA1	Message	Date
Michal Čihař	edd929216a	Bring back token validation to GET requests ... This is necessary to avoid CSRF on SQL queries. This is really more a short term fix, proper fix (to be implemented in master) is to avoid accepting SQL queries from GET requests. This reverts commits: * dae3390a02 * ea73fded71 * 90433788d6 * f797a8d87d * 9c1cfc8553 Signed-off-by: Michal Čihař <michal@cihar.com>	2017-12-14 17:27:22 +01:00
Michal Čihař	ea73fded71	Adjust tests to token removal from GET ... Signed-off-by: Michal Čihař <michal@cihar.com>	2016-07-28 11:22:45 +02:00
Michal Čihař	dce94f229f	More consistency for URL::getCommon ... Now URL::getCommon always returns HTML encoded string, if you want unencded one, use URL::getCommonRaw. This makes it easier to review the code if uses correct variant. Also I've fixed several wrong uses of the HTML encoded variant in Location header. Signed-off-by: Michal Čihař <michal@cihar.com>	2016-06-17 12:44:29 +02:00
Madhura Jayaratne	abfce82447	Fix test file names and test class names ... Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>	2016-02-23 22:39:15 +11:00