[7 / 7] - Admin settings + Cross-site request forgery / Nonces#204

Open

TheSCREWEDSoftware wants to merge 7 commits into

azerothcore:masterfrom

TheSCREWEDSoftware:7_user_admincsrf

Commits on Jun 23, 2026

Profile theming: dark mode toggle, shared CSS, character colour helper
TheSCREWEDSoftware
committed
Characters menu: clickable rows, reset-order, CSRF nonce, escaping
TheSCREWEDSoftware
committed
Mail Return: redesigned layout, subject escaping, empty-state reset
TheSCREWEDSoftware
committed
Item Restoration: redesigned page, ownership checks (IDOR), input validation
TheSCREWEDSoftware
committed
Misc menus: Unstuck nonce/data, Resurrection Scroll, RAF nonce + icon escaping
TheSCREWEDSoftware
committed
Security tab: password change, 2FA (website/in-game/admin/email), connection logging + GeoIP
TheSCREWEDSoftware
committed
Admin: Realm Settings revamp (modules panel) + CSRF nonces on all settings forms
TheSCREWEDSoftware
committed