Ingo Schommer 2700d73e97 ENHANCEMENT Limiting "alc_enc" cookie (remember login token) to httpOnly to reduce risk of information exposure through XSS ...

git-svn-id: svn://svn.silverstripe.com/silverstripe/open/modules/sapphire/trunk@86027 467b73ca-7a2a-4603-9d3b-597d59a354a9

2009-09-10 03:23:31 +00:00

..

Authenticator.php

Merged changes from 2.3 branch

2009-02-01 23:49:53 +00:00

BasicAuth.php

MINOR phpdoc documentation

2009-03-22 22:59:14 +00:00

ChangePasswordForm.php

Merged changes from 2.3 branch

2009-02-01 23:49:53 +00:00

Group.php

NOTFORMERGE: Merged 84085 from 2.3

2009-08-10 04:32:39 +00:00

LoginAttempt.php

Merged from branches/2.3

2009-04-29 00:07:39 +00:00

LoginForm.php

Merged from branches/nzct-trunk. Use 'svn log -c <changeset> -g' for full commit message. Merge includes stability fixes and minor refactor of TableListField and ComplexTableField.

2008-10-08 02:00:12 +00:00

Member.php

ENHANCEMENT Limiting "alc_enc" cookie (remember login token) to httpOnly to reduce risk of information exposure through XSS

2009-09-10 03:23:31 +00:00

MemberAuthenticator.php

BUGFIX: MemberAuthenticator::authenticate() returns a member object or false, in keeping with the current docs.

2009-06-28 02:48:33 +00:00

MemberLoginForm.php

ENHANCEMENT Avoid information disclosure in Security/lostpassword form by returning the same message regardless wether a matching email address was found in the database.

2009-09-10 03:01:46 +00:00

MemberPassword.php

Merged changes from 2.3 branch

2009-02-01 23:49:53 +00:00

NZGovtPasswordValidator.php

MINOR Unified @package PHPdoc (added where missing, removed duplicates)

2008-06-15 13:33:53 +00:00

PasswordValidator.php

Updating queries to be more DB agnostic

2008-11-24 09:31:14 +00:00

Permission.php

API CHANGE Removed Permission->listcodes(), use custom code

2009-09-10 01:54:15 +00:00

PermissionDropdownField.php

MINOR Unified @package PHPdoc (added where missing, removed duplicates)

2008-06-15 13:33:53 +00:00

PermissionProvider.php

MINOR Unified @package PHPdoc (added where missing, removed duplicates)

2008-06-15 13:33:53 +00:00

Security.php

ENHANCEMENT Avoid information disclosure in Security/lostpassword form by returning the same message regardless wether a matching email address was found in the database.

2009-09-10 03:01:46 +00:00