Skip to content
Snippets Groups Projects
  1. Feb 19, 2013
  2. Feb 15, 2013
  3. Dec 10, 2012
  4. Oct 19, 2012
  5. Oct 11, 2012
  6. Oct 08, 2012
  7. Jul 09, 2012
  8. Jun 20, 2012
    • Jared Hancock's avatar
      Implement simple CSRF protection scheme · ff1d8b9e
      Jared Hancock authored
      Protect againts cross-site request forgery attacks by requiring a special
      form-field or header to be sent with requests that modify ticket system
      data.
      
      This meant a slight change to the AJAX ticket locking mechanism. It was
      defined to lock with a GET request; however, GET requests are defined as
      safe methods and should not modify backend data (such as a lock
      acquisition). Therefore, the the lock acquire AJAX method was changed to
      require a POST method.
      
      Also remove old, no-longer-used staff panel include files
      ff1d8b9e
  9. Apr 28, 2012
  10. Apr 27, 2012
  11. Mar 19, 2012
Loading