Matt Pass 1d5c74e424 Add CSRF and clickjacking protection ...

This header file included in all PHP files as first item.
CSRF checks happen on GET or POST instances
Security related headers also added to prevent clickjacking

2014-04-18 18:21:17 +01:00

..

bug-files-check.php

Include headers lib & csrf hidden form field

2014-04-18 17:57:54 +01:00

config___settings.php

Upgrade to CodeMirror 3.23

2014-04-10 10:04:26 +01:00

config___users-template.php

Should be an array, not a string

2014-03-19 19:05:07 +00:00

download.php

Include headers lib & csrf hidden form field

2014-04-18 17:57:54 +01:00

editor.css

Toned down colors by 20%, gutter BG color change

2013-07-23 08:55:05 +01:00

file-control.php

headers.php included and csrf POST added

2014-04-18 18:10:50 +01:00

file-type-icons.css

8 new languages added

2014-04-10 10:04:28 +01:00

file-types.css

Language related items moved to seperate files

2014-03-15 14:09:06 +00:00

files.css

Icons have new position in spritesheet

2014-02-21 09:15:09 +00:00

foldcode.js

CSS class name changes

2013-05-29 08:16:33 +01:00

get-branch.php

Include headers lib & csrf hidden form field

2014-04-18 17:57:54 +01:00

headers.php

Add CSRF and clickjacking protection

2014-04-18 18:21:17 +01:00

help.css

Cmd/Ctrl shortcuts, Ctrl+space added and [?] info

2013-07-24 08:23:51 +01:00

help.php

Include headers lib & csrf hidden form field

2014-04-18 17:57:54 +01:00

ice-coder.css

Darker input field BG's

2014-03-15 13:24:42 +00:00

ice-coder.js

Add csrf to end of all querystrings

2014-04-18 18:19:58 +01:00

ice-coder.min.js

Add csrf to end of all querystrings

2014-04-18 18:19:58 +01:00

login.php

Include headers lib & csrf hidden form field

2014-04-18 17:57:54 +01:00

mmd.js

Markdown parser added

2013-04-30 17:48:54 +01:00

multiple-results.css

Remove o prefix add ms

2013-07-07 15:27:09 +01:00

multiple-results.php

Include headers lib & csrf hidden form field

2014-04-18 17:57:54 +01:00

php.ini

Turn magic quotes gpc off

2013-04-20 16:12:32 +01:00

plugins-display.php

Include headers lib & csrf hidden form field

2014-04-18 17:57:54 +01:00

plugins-manager.css

Plugins Manager added

2013-12-29 14:41:18 +00:00

plugins-manager.php

headers.php included and csrf POST and GET added

2014-04-18 18:07:49 +01:00

properties.css

Renamed to properties.php & css

2012-10-09 07:57:28 +01:00

properties.php

Include headers lib & csrf hidden form field

2014-04-18 17:57:54 +01:00

settings-common.php

This is now set, in headers.php

2014-04-18 17:59:27 +01:00

settings-save-current-files.php

previousFiles and last10Files updated here now

2014-01-11 15:15:44 +00:00

settings-screen.css

info added as notes now tucked into [?] icons

2014-02-28 12:10:43 +00:00

settings-screen.php

Include headers lib & csrf hidden form field

2014-04-18 17:57:54 +01:00

settings-update.php

Get rid of line breaks, puts settings onto 1 line

2014-04-18 10:10:05 +01:00

settings.php

Replace on SCRIPT_FILENAME

2014-01-16 14:15:34 +00:00

updater.php

Include headers lib & csrf hidden form field

2014-04-18 17:57:54 +01:00