CSRF Fixes and Remote Code Execution Prevention#1634

Merged

muarachmann merged 10 commits into

LibreHealthIO:masterfrom

maggienegm:csrf-fix-forms

Jul 19, 2021

Commits on Jun 29, 2020

begin work on csrf fixes
Ngai-E
committed

Commits on Jul 2, 2020

Created CsrfToken class
maggienegm
committed

Commits on Jul 15, 2020

fix remote code execution in on history and import template modules
Ngai-E
committed

Commits on Aug 1, 2020

Added csrf protection in vulnerable files with forms
maggienegm
committed

Commits on Aug 3, 2020

Type cast input for hash_hmac()
maggienegm
committed

Commits on Aug 8, 2020

Commits on Aug 10, 2020

Commits on Aug 13, 2020

Arbitrary File Actions in import_template.php, make ajax csrf token to be a string, add csrf token to template import
Ngai-E
committed