1. aeb2c3e Added new config parameter "csrf_exclude_uris" which allows for URIs to be whitelisted from CSRF verification. Fixes #149 by Alex Bilbie · 13 years ago
  2. 4b9c629 backed out 648b42a75739, which was a NON-trivial whitespace commit. It broke the Typography class's string replacements, for instance by Derek Jones · 14 years ago
  3. 114ab09 Fixed double-space typo. by Razican · 14 years ago
  4. b3e614d Change in core/Security.php to match coding standards. by Greg Aker · 14 years ago
  5. 9e26798 Fix: codeigniter-reactor/199 cookie name was overwritten with token name by patwork · 14 years ago
  6. ef1a55a Fix: codeigniter-reactor/199 CSRF config in Security class is no longer ignored by patwork · 14 years ago
  7. 14a0ac6 Moving security to core. by Pascal Kriete · 14 years ago[Renamed from system/libraries/Security.php]
  8. c9c045a Improving parameter security in xss clean by Pascal Kriete · 14 years ago
  9. 33ed0f3 Merged CodeIgniter Core changes and integrated rob1's secure cookie change into my secure cookie change. by Phil Sturgeon · 14 years ago
  10. 14287f3 Whitespace cleanup in libraries/ by Pascal Kriete · 14 years ago
  11. 154da11 Doy- forget the session cookie function! Added secure cookie config check there too. by Robin Sowell · 14 years ago
  12. 3bb336c Automated merge with https://bitbucket.org/ellislab/codeigniter by Phil Sturgeon · 14 years ago
  13. 9805ecc Added access scope to security library and added config options for csrf protection by Eric Barnes · 14 years ago
  14. 0711dc8 Hey look, it's 2011 by Greg Aker · 14 years ago
  15. a926328 Changing all class constructors to __construct() by Greg Aker · 14 years ago
  16. 741de1c Updating PHP requirements in files 5.1.6 by Greg Aker · 14 years ago
  17. aa7d3f9 Automated merge with https://bitbucket.org/barrymieny/codeigniter by Derek Jones · 14 years ago
  18. 2ef3759 modified the security helper to assist in preventing directory traversal when using sanitize_filename() for user input by Derek Jones · 14 years ago
  19. dd67197 Cleanup of stray spaces and tabs by Barry Mieny · 14 years ago
  20. 95b183ad fixed spelling error in Security class property for the CSRF cookie by Derek Jones · 14 years ago
  21. b3f10a2 separated the CSRF cookie name from the token, forced new token on successful POST by Derek Jones · 14 years ago
  22. 958543a Adding CSRF into config Adding CSRF token into form open() by Derek Allard · 15 years ago
  23. 757dda6 Fixing a bug where odbc/mssql/oci8 db drivers would encounter a PHP error due to a function being moved from the input to security class. by Greg Aker · 15 years ago
  24. a091147 moved entity_decode() to the Security library to handle an issue with HTML in input when the global XSS filter is enabled by Derek Jones · 15 years ago
  25. e701d76 added Security library by Derek Jones · 15 years ago