493 Commits

Author SHA1 Message Date
Lonnie Ezell
7b1149b5e5
Rector fixes 2022-01-13 22:22:31 -06:00
Lonnie Ezell
dc361856e3
Additional review comments 2022-01-13 22:16:39 -06:00
Lonnie Ezell
06f6cd6868
Added new View Decorators. 2022-01-13 00:33:57 -06:00
kenjis
d548118c26
feat: add config for disabling to replace nonce tag automatically 2022-01-12 09:15:51 +09:00
kenjis
6be16a8c5c
feat: custom nonce tags 2022-01-12 09:15:50 +09:00
kenjis
7af8635f94
refactor: fix PHPStan errors 2022-01-10 11:49:24 +09:00
Abdul Malik Ikhsan
4e3792d138
cs fix 2022-01-10 02:02:52 +00:00
Abdul Malik Ikhsan
af7fb3f9a5
[Rector] Apply PHP 7.4 Requirement and syntax 2022-01-10 02:02:27 +00:00
kenjis
e943b691e1
feat: add SecureHeaders filter 2021-12-08 09:52:12 +09:00
kenjis
e90d0c43ba
Merge pull request #5371 from paulbalandan/deprecated-null-on-internal-fn
Fix deprecated usage of `null` on `string` params of internal functions
2021-11-25 09:00:11 +09:00
John Paul E. Balandan, CPA
867322868e
Fix deprecated usage of null on string params of internal functions 2021-11-22 20:45:12 +08:00
kenjis
871e4996da
config: add invalidchars to Filter.php as comment 2021-11-22 11:32:22 +09:00
kenjis
1945401557
refactor: replace $request->uri with $request->getUri()
See #5344
2021-11-18 10:00:25 +09:00
kenjis
c8f126d23d
Merge pull request #5283 from kenjis/feat-csrf-token-randomization
feat: add CSRF token randomization
2021-11-15 08:53:35 +09:00
Najdanovic Ivan
e44008b8c7
Toolbar - Make it possible to turn off var data collection 2021-11-09 17:14:23 +01:00
kenjis
0355175297
feat: add CSRF token randomization 2021-11-04 19:10:16 +09:00
kenjis
3901496bc2
docs: add PHPDoc comments 2021-10-30 09:39:58 +09:00
kenjis
f53a1da13b
refactor: move Config\App::$CURLRequestShareOptions to Config\CURLRequest::$shareOptions 2021-10-30 09:22:54 +09:00
kenjis
aed89d9119
fix: add config $CURLRequestShareOptions for the CURLRequest
If $CURLRequestShareOptions is false, reset all config after sending a request.
If true, keep the all config (the same as before).
2021-10-29 17:44:10 +09:00
kenjis
22634300eb
feat: add Session based CSRF protection 2021-10-21 15:14:47 +09:00
kenjis
26e0025df9
Fix CSRF filter does not work when set it to only post
* refactor: case the existence of config files with if statements

To make it easier to know which parts to delete in the future.

* docs: fix PHPDoc explanation

* fix: bug that CSRF cookie is not sent just by calling csrf_hash()

When the CSRF filter was set to POST method, it did not work.

* refactor: replace deprecated method getHeader()

* refactor: extract method

* refactor: extract method

* refactor: extract method

* refactor: use $this->hash instead of $_COOKIE

* test: fix the timing for setting superglobals

* test: fix Cannot modify header information

ErrorException: Cannot modify header information - headers already sent by ...

* style: vendor/bin/rector process

* refactor: ensure instance

It becomes clear that it is `SecurityConfig`.

Co-authored-by: Abdul Malik Ikhsan <samsonasik@gmail.com>

* refactor: ensure instance

It becomes clear that it is `CookieConfig`.

Co-authored-by: Abdul Malik Ikhsan <samsonasik@gmail.com>

* refactor: when $cookie is null, Cookie::setDefaults($cookie) does nothing

* refactor: extract method

* fix: make private extracted methods

* fix: make private added property

* fix: fallback to the local properties

Takes care when a user removes properties in config classes.

* refactor: use $request instead of $_POST

Co-authored-by: Abdul Malik Ikhsan <samsonasik@gmail.com>
2021-10-16 23:11:01 +08:00
John Paul E. Balandan, CPA
cb714b5b0c
Change behavior of class_attributes_separation rule 2021-10-11 17:03:05 +08:00
kenjis
bd49a5b9d1
docs: fix PHPDoc for Security 2021-10-08 16:51:27 +09:00
kenjis
98bad0a885
feat: add multiple filters for a route 2021-09-25 11:45:34 +09:00
John Paul E. Balandan, CPA
107df929b0
Fix coding style violations in 4.2 2021-09-08 00:23:10 +08:00
Mostafa Khudair
eb3ed2b800 Add missing make:config command config view file 2021-09-07 23:13:29 +08:00
MGatner
18f24101d1 Update app/Config/Cache.php 2021-09-07 23:04:57 +08:00
MGatner
1c51f25e8a Add config for cache keys 2021-09-07 23:04:56 +08:00
Gianluigi Vizzielli
d5a70be1bd Graphic fix on some screen res
Before: https://prnt.sc/1559re2
After: https://prnt.sc/1559uou
2021-09-07 22:16:11 +08:00
MGatner
55e79f6ef4 Add Publisher restrictions 2021-09-07 22:16:10 +08:00
John Paul E. Balandan, CPA
4ab9d66b53
Switch to official coding standard (#5038)
* Switch to official coding standard

* Update .no-header.php-cs-fixer.dist.php

Co-authored-by: Abdul Malik Ikhsan <samsonasik@gmail.com>
2021-09-02 12:32:07 +08:00
John Paul E. Balandan, CPA
b7ec33cd56
Remove superfluous phpdoc tags (#4941) 2021-07-24 19:30:51 +08:00
John Paul E. Balandan, CPA
a6cfb8c1e6
Remove useless code separator comments (#4946) 2021-07-19 21:08:51 +08:00
John Paul E. Balandan, CPA
36152b39b2
Change some phpdocs to simple comments (#4945) 2021-07-18 22:13:55 +08:00
John Paul E. Balandan, CPA
cb8fb02291
Merge pull request #4924 from paulbalandan/single---rules
Define `single_**` rules
2021-07-11 22:13:02 +08:00
John Paul E. Balandan, CPA
a4fe347638
Add ? to nullable typehints 2021-07-09 23:13:08 +08:00
John Paul E. Balandan, CPA
c56a5b1963
Simplify single line comments 2021-07-09 22:57:27 +08:00
John Paul E. Balandan, CPA
1dc72c1d65
Convert is_null to null === and fix phpstan errors 2021-07-09 00:08:00 +08:00
John Paul E. Balandan, CPA
651a4e9e6e
Enable no_null_property_initialization fixer (#4901) 2021-07-04 17:00:32 +08:00
John Paul E. Balandan, CPA
8ac891bd3f
Conditionally enable no_blank_lines_after_phpdoc fixer 2021-07-03 00:44:18 +08:00
John Paul E. Balandan, CPA
7b7d251f89
Convert to explicit those implicit string variables (#4882) 2021-06-28 22:08:40 +08:00
John Paul E. Balandan, CPA
36abf56f5f
Merge pull request #4823 from paulbalandan/phpdoc-types
Phpdoc types
2021-06-15 21:42:29 +08:00
John Paul E. Balandan, CPA
de234899aa
Sort phpdoc types alphabetically 2021-06-11 23:46:56 +08:00
John Paul E. Balandan, CPA
7a38ce6980
Remove unneeded and aliased phpdocs 2021-06-11 23:23:14 +08:00
John Paul E. Balandan, CPA
34110026d9
Properly indent all phpdocs 2021-06-11 23:14:51 +08:00
John Paul E. Balandan, CPA
5333844a19
Shift binary alignment to align_single_space_minimal 2021-06-10 00:35:54 +08:00
John Paul E. Balandan, CPA
cbfe80d854
Separate and group similar phpdocs 2021-06-08 12:19:15 +08:00
John Paul E. Balandan, CPA
4129b40cb6
Use short forms of param and return types 2021-06-08 11:46:56 +08:00
John Paul E. Balandan, CPA
d030096732
Enable braces 2021-06-08 10:15:25 +08:00
John Paul E. Balandan, CPA
7b37453fcc
Enable blank_line_before_statement fixer 2021-06-08 01:26:32 +08:00