Thomas Vincent c749790d84 fix(security): [develop] require CSRF-protected POST for link and plugin reordering (#8278) ...

* security: require CSRF-protected POST for link and plugin reordering (#7454)

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* fix(csrf): share POST and token guards for reorder actions

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

---------

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

2026-10-13 07:52:20 -04:00

..

Auth

fix(auth): [develop] preserve SAML POST callback sessions (#8333)

2026-10-12 15:42:00 -07:00

Crypto

Close test-suite discovery and coverage gaps (#7970)

2026-09-05 18:38:42 -07:00

Csp

refactor(tests): reorganize unit tests into domain category folders (#7733)

2026-08-16 19:23:31 -07:00

Csrf

fix(security): [develop] require CSRF-protected POST for link and plugin reordering (#8278)

2026-10-13 07:52:20 -04:00

InputValidation

chore: normalize CRLF line endings to LF across Cacti-owned files (#8156)

2026-10-02 17:22:42 -04:00

Ldap

chore: normalize CRLF line endings to LF across Cacti-owned files (#8156)

2026-10-02 17:22:42 -04:00

Misc

chore: normalize CRLF line endings to LF across Cacti-owned files (#8156)

2026-10-02 17:22:42 -04:00

PathTraversal

fix(security): [develop] require CSRF-protected POST for link and plugin reordering (#8278)

2026-10-13 07:52:20 -04:00

Redirect

security: stop trusting Host for HTTPS redirects (#7833)

2026-08-29 16:01:36 -07:00

Session

fix(auth): reject malformed remember cookies (#7976)

2026-09-12 20:56:24 -04:00

Shell

chore: normalize CRLF line endings to LF across Cacti-owned files (#8156)

2026-10-02 17:22:42 -04:00

ShellInjection

chore: normalize CRLF line endings to LF across Cacti-owned files (#8156)

2026-10-02 17:22:42 -04:00

SqlInjection

chore: normalize CRLF line endings to LF across Cacti-owned files (#8156)

2026-10-02 17:22:42 -04:00

Ssrf

refactor(tests): reorganize unit tests into domain category folders (#7733)

2026-08-16 19:23:31 -07:00

Type

refactor(tests): reorganize unit tests into domain category folders (#7733)

2026-08-16 19:23:31 -07:00

Xss

Fix develop client behavior, popup isolation and PHP method visibility (#8292)

2026-10-11 21:15:39 -04:00

Batch11SecurityRegressionTest.php

feature: user-defined filter layouts with administrator publishing (#8185)

2026-10-05 19:49:42 -04:00