webapp/bookstack
1
0
Fork 0
mirror of https://github.com/BookStackApp/BookStack.git synced 2026-10-24 18:59:20 +03:00
Code Activity
Files
v26.09.2
bookstack/app/Http/Middleware
History
Dan Brown f239524447 SAML2: Removed the wide CSRF exception for SAML routes 
There's only one route that should ignore CSRF, and that's already
marked to not use the CSRF middlware in the routes definition.
Helps prevent potential CSRF based logout from subdomains (same-sites).

Thanks to The Xora team for responsibly reporting.
2026-10-14 13:25:32 +01:00
..
ApiAuthenticate.php
Page Content: Added form elements to filtering
2026-01-29 14:54:08 +00:00
ApplyCspRules.php
Updated CSP with frame-src rules
2022-03-07 14:27:41 +00:00
Authenticate.php
Guest control: Cleaned methods involved in fetching/handling
2023-09-16 13:18:35 +01:00
AuthenticatedOrPendingMfa.php
Played around with a new app structure
2023-05-17 17:56:55 +01:00
CheckEmailConfirmed.php
Played around with a new app structure
2023-05-17 17:56:55 +01:00
CheckGuard.php
Apply fixes from StyleCI
2021-06-26 15:23:15 +00:00
CheckUserHasPermission.php
Permissions: Updated usage of controller methods to use enum
2025-09-08 18:14:38 +01:00
ClearPerRequestCaches.php
Layouts: Review and testing/CI update
2026-08-17 19:53:58 +01:00
EncryptCookies.php
Maintenance: Addressed a range of phpstan level 3 issues
2025-09-03 10:47:45 +01:00
Localization.php
Locales: Removed a lot of existing locale handling
2023-09-17 22:02:12 +01:00
PreventRequestsDuringMaintenance.php
Maintenance: Addressed a range of phpstan level 3 issues
2025-09-03 10:47:45 +01:00
PreventResponseCaching.php
Themes: Added route to serve public theme files
2025-01-13 14:34:44 +00:00
RedirectIfAuthenticated.php
Framework: Upgrade from Laravel 9 to 10
2024-03-16 15:12:14 +00:00
RunThemeActions.php
Apply fixes from StyleCI
2021-06-26 15:23:15 +00:00
StartSessionExtended.php
Sessions: Ignored extra meta/dist content in history tracking
2025-12-03 14:10:09 +00:00
StartSessionIfCookieExists.php
Change email confirmation from own middle to trait
2019-12-30 15:49:20 +00:00
ThrottleApiRequests.php
Framework: Upgrade from Laravel 9 to 10
2024-03-16 15:12:14 +00:00
TrimStrings.php
User Account: Require existing password on password change
2026-08-28 11:43:07 +01:00
TrustHosts.php
Framework: Upgrade from Laravel 9 to 10
2024-03-16 15:12:14 +00:00
TrustProxies.php
Maintenance: Addressed a range of phpstan level 3 issues
2025-09-03 10:47:45 +01:00
VerifyCsrfToken.php
SAML2: Removed the wide CSRF exception for SAML routes
2026-10-14 13:25:32 +01:00