nielsvangijzen 86a8ec5302 Added CSRF to the application (took in account backwards compatibility) ...

Mitigated the XSS vulnerabilities reported by HackDefense
Advisories for said vulnerabilities can be found here:
https://hackdefense.com/publications/cve-2019-18345-davical-caldav-server-vulnerability
https://hackdefense.com/publications/cve-2019-18346-davical-caldav-server-vulnerability
https://hackdefense.com/publications/cve-2019-18347-davical-caldav-server-vulnerability

2019-10-28 11:55:11 +01:00

..

css

Don't disable upload field. Use library to create 'append mode' field.

2012-05-15 00:21:35 +12:00

images

Kinda working with both Lightning & Evolution now. About to restructure to

2006-09-21 18:24:26 +12:00

js

Fix replacement in multi-parameter string.

2009-11-21 20:58:16 +13:00

.htaccess

Update apache-davical.conf adding .well-known rewriting

2017-01-17 23:39:53 +01:00

admin.php

Added CSRF to the application (took in account backwards compatibility)

2019-10-28 11:55:11 +01:00

always.php

Added CSRF to the application (took in account backwards compatibility)

2019-10-28 11:55:11 +01:00

caldav.php

clean up obsolete code: supported_methods and supported_reports was moved to DAVResource

2018-01-08 22:45:33 +01:00

davical.css

Move location of CSS submenus slightly.

2010-02-24 12:50:05 +13:00

feed.php

fix remaining apigen errors (duplicate function names etc)

2016-12-30 08:54:24 +01:00

freebusy.php

Revert "Support http://.../freebusy.php?foo@example.com"

2017-09-19 20:01:00 +02:00

help.php

use secure URIs where possible

2017-01-08 15:48:52 +01:00

index.php

use secure URIs where possible

2017-01-08 15:48:52 +01:00

iSchedule.php

Need to use sprintf!

2019-01-05 00:12:34 +13:00

metrics.php

eliminate trailing whitespace, expand tabs

2016-12-30 08:52:44 +01:00

public.php

When logging failed anonymous access, don't crash and burn.

2012-05-05 17:02:22 +12:00

robots.txt

Basic robots.txt that does nothing except stop error log messages.

2010-12-25 14:25:58 +13:00

setup.php

If DAViCal or AWL versions pass, show the running version.

2018-10-02 20:41:12 +13:00

tools.php

eliminate trailing whitespace, expand tabs

2016-12-30 08:52:44 +01:00

tz.php

The changedsince or changesince parameter has an uncertain name.

2011-10-05 11:42:40 +02:00

upgrade.php

use secure URIs where possible

2017-01-08 15:48:52 +01:00