Releases: slimphp/Slim-Csrf
Releases · slimphp/Slim-Csrf
1.5.0
1.4.0
What's Changed
- Update phpspec/prophecy requirement from ^1.15 to ^1.16 by @dependabot in #167
- Update phpspec/prophecy requirement from ^1.16 to ^1.17 by @dependabot in #169
- Update phpunit/phpunit requirement from ^9.5 to ^9.6 by @dependabot in #170
- Update phpspec/prophecy-phpunit requirement from ^2.0 to ^2.1 by @dependabot in #172
- Update squizlabs/php_codesniffer requirement from ^3.7 to ^3.8 by @dependabot in #173
- Update phpspec/prophecy requirement from ^1.17 to ^1.18 by @dependabot in #174
- Allow tokens via header by @blizzz in #175
New Contributors
Full Changelog: 1.3.0...1.4.0
1.3.0
Total issues resolved: 13
- 133: Upgrade to GitHub-native Dependabot thanks to @dependabot-preview[bot]
- 134: Update phpspec/prophecy requirement from ^1.12 to ^1.13 thanks to @dependabot[bot]
- 135: Update squizlabs/php_codesniffer requirement from ^3.5.8 to ^3.6.0 thanks to @dependabot[bot]
- 137: Update phpspec/prophecy requirement from ^1.13 to ^1.14 thanks to @dependabot[bot]
- 138: Add github actions workflow thanks to @l0gicgate
- 140: Bug in enforcing storage limit, grew too large in many cases. thanks to @deployHuman
- 141: Update squizlabs/php_codesniffer requirement from ^3.6.0 to ^3.6.1 thanks to @dependabot[bot]
- 144: PSR-12 thanks to @t0mmy742
- 145: Add XOR to token to avoid BREACH attack thanks to @t0mmy742
- 146: Update phpspec/prophecy requirement from ^1.14 to ^1.15 thanks to @dependabot[bot]
- 147: Drop Support for PHP 7.3 thanks to @nbayramberdiyev
- 162: Update squizlabs/php_codesniffer requirement from ^3.6 to ^3.7 thanks to @dependabot[bot]
- 165: Bug fix: Enforce storage limit on failure thanks to @akrabat
1.2.1
This release makes using an Interator for the backing storage much better.
Total issues resolved: 3
1.2.0
1.1.0
Note that this release includes a fix for replay attacks when using Slim-Csrf in non-persistent mode. Upgrading to this version is recommended.
Total issues resolved: 10
- 108: Minor code comment correction thanks to @iamrameffort
- 112: Update .travis.yml thanks to @sergiy-petrov
- 115: Make remoteTokenFromStorage method public thanks to @l0gicgate
- 116: Minor improvements in code complexity with early returns and early validation thanks to @Ayesh
- 119: Update phpspec/prophecy requirement from ^1.8 to ^1.10 thanks to @dependabot-preview[bot]
- 120: Update squizlabs/php_codesniffer requirement from ^3.4.2 to ^3.5.5 thanks to @dependabot-preview[bot]
- 122: Update squizlabs/php_codesniffer requirement from ^3.5.5 to ^3.5.6 thanks to @dependabot-preview[bot]
- 123: Update squizlabs/php_codesniffer requirement from ^3.5.6 to ^3.5.8 thanks to @dependabot-preview[bot]
- 126: Remove token on validation to prevent replay attacks thanks to @akrabat
- 127: Raise error if there is a token in the body of a GET request thanks to @akrabat
1.0.0
Total issues resolved: 1
- 105: PSR-15 Support thanks to @l0gicgate
0.8.3
Total issues resolved: 1
0.8.2
0.8.1
Total issues resolved: 2