Rodrigo Cortés Cano 719935d17a Improve error message for expired CSRF token errors ...

This backports the invalid-token/session-expired UX improvement to the 4.0 branch.

When a session expires and an old CSRF token is submitted, PostfixAdmin 
currently shows a raw invalid token error. 

This change renders a translated session-expired page instead, returning HTTP 419.

thanks @TrapoSAMA

2026-07-03 18:38:14 +01:00

..

css

upgrade moment.js to v2.30.1 - should fix issue with ReDOS (regex denial of service) - see #902

2025-02-21 09:55:20 +00:00

images

PSR2 -> PSR12 formatting

2022-06-28 13:46:11 +01:00

users

Improve error message for expired CSRF token errors

2026-07-03 18:38:14 +01:00

app-passwords.php

manaul merge in of verdigado:master (see #753) (MFA/TOTP support)

2023-12-23 17:05:52 +00:00

backup.php

remove more references to sourceforge

2025-07-13 18:29:37 +01:00

broadcast-message.php

Improve error message for expired CSRF token errors

2026-07-03 18:38:14 +01:00

common.php

Improve error message for expired CSRF token errors

2026-07-03 18:38:14 +01:00

delete.php

Improve error message for expired CSRF token errors

2026-07-03 18:38:14 +01:00

edit.php

Improve error message for expired CSRF token errors

2026-07-03 18:38:14 +01:00

editactive.php

Improve error message for expired CSRF token errors

2026-07-03 18:38:14 +01:00

index.php

remove more references to sourceforge

2025-07-13 18:29:37 +01:00

jquery-3.7.0.min.js

replace jquery 1.12.4 with 3.7.0 - see #734

2023-06-13 11:06:43 +01:00

list-virtual.php

remove more references to sourceforge

2025-07-13 18:29:37 +01:00

list.php

remove more references to sourceforge

2025-07-13 18:29:37 +01:00

login-mfa.php

Improve error message for expired CSRF token errors

2026-07-03 18:38:14 +01:00

login.php

Improve error message for expired CSRF token errors

2026-07-03 18:38:14 +01:00

main.php

global search -> avoid shortcut of empty list for super-admin, always populate list, and only allow a search if $list_domains is not empty

2025-10-28 13:48:09 +00:00

password-change.php

move public facing stuff into public/, this allows us to stop exposing templates_c/ etc to the world

2018-01-25 20:27:09 +00:00

password-recover.php

move public facing stuff into public/, this allows us to stop exposing templates_c/ etc to the world

2018-01-25 20:27:09 +00:00

sendmail.php

Improve error message for expired CSRF token errors

2026-07-03 18:38:14 +01:00

setup.php

remove more references to sourceforge

2025-07-13 18:29:37 +01:00

totp-exceptions.php

manaul merge in of verdigado:master (see #753) (MFA/TOTP support)

2023-12-23 17:05:52 +00:00

totp.php

manaul merge in of verdigado:master (see #753) (MFA/TOTP support)

2023-12-23 17:05:52 +00:00

upgrade.php

Fix hardcoded table name mailbox_app_password

2025-09-11 22:39:57 +02:00

vacation.php

Improve error message for expired CSRF token errors

2026-07-03 18:38:14 +01:00

viewlog.php

token renames (a variable called SESSID_USERNAME makes me think it is reserved by PHP or something, which I do not think it actually is, so just user a more meaningful $username

2025-10-28 09:49:29 +00:00

xmlrpc.php

apparently these all need reformatting

2024-12-05 14:33:41 +00:00