Repository navigation

(hardening) Protect QuickTree add and clear actions against CSRF - #42

Open

somethingwithproof wants to merge 6 commits into

mainfrom

fix/hardening-quicktree-csrf-40

Open

(hardening) Protect QuickTree add and clear actions against CSRF#42
somethingwithproof wants to merge 6 commits into
mainfrom
fix/hardening-quicktree-csrf-40

Commits on Oct 17, 2026
- security: Protect QuickTree add and clear actions against CSRF (#40)
  somethingwithproof
  committed
  cbb856b
Commits on Oct 18, 2026
- refactor: route QuickTree mutation checks through a named guard
  somethingwithproof
  committed
  778a07d
Commits on Oct 20, 2026
- fix: preserve tree authorization while merging CSRF guards
  somethingwithproof
  committed
  6ed16a1
Commits on Oct 23, 2026
- fix(csrf): use the shared Cacti POST guard with legacy fallback
  somethingwithproof
  committed
  db050bb
- test(csrf): require shared guard invocation on supported hosts
  somethingwithproof
  committed
  965e933
Commits on Oct 24, 2026
- fix(tests): preserve the existing prepared statement parameter form
  somethingwithproof
  committed
  cb49cbe