Repository navigation

(hardening) Protect QuickTree add and clear actions against CSRF - #42

Merged

TheWitness merged 7 commits into

mainfrom

fix/hardening-quicktree-csrf-40

Nov 4, 2026

Merged

(hardening) Protect QuickTree add and clear actions against CSRF#42
TheWitness merged 7 commits into
mainfrom
fix/hardening-quicktree-csrf-40

Commits on Oct 17, 2026
- security: Protect QuickTree add and clear actions against CSRF (#40)
  somethingwithproof
  committed
  cbb856b
Commits on Oct 18, 2026
- refactor: route QuickTree mutation checks through a named guard
  somethingwithproof
  committed
  778a07d
Commits on Oct 20, 2026
- fix: preserve tree authorization while merging CSRF guards
  somethingwithproof
  committed
  6ed16a1
Commits on Oct 23, 2026
- fix(csrf): use the shared Cacti POST guard with legacy fallback
  somethingwithproof
  committed
  db050bb
- test(csrf): require shared guard invocation on supported hosts
  somethingwithproof
  committed
  965e933
Commits on Oct 24, 2026
- fix(tests): preserve the existing prepared statement parameter form
  somethingwithproof
  committed
  cb49cbe
Commits on Oct 25, 2026
- Merge branch 'main' into fix/hardening-quicktree-csrf-40
  somethingwithproof
  authored
  6e0a17b