Error202/yii2 - yii2

Commit Graph

Author	SHA1	Message	Date
pgaultier	35ac718110	Fixes #16006 : Handle case when `X-Forwarded-Host` header have multiple hosts separated with a comma	7 years ago
Vladimir Reznichenko	1a74b3d4f8	[minor] SCA with Php Inspections (EA Ultimate) (#15871 ) * Php Inspections (EA Ultimate): use type casting where applicable * Php Inspections (EA Ultimate): use constants where applicable * Php Inspections (EA Ultimate): CS * Php Inspections (EA Ultimate): address some of one-time used variables * Php Inspections (EA Ultimate): address some of performance-related findings * Php Inspections (EA Ultimate): address some of performance-related findings * Php Inspections (EA Ultimate): revert a constant usage * Php Inspections (EA Ultimate): revert sequential assignments * Php Inspections (EA Ultimate): build is green again * Php Inspections (EA Ultimate): revert array_merge tweaks * Php Inspections (EA Ultimate): revert BC-incompatible one-time used variable tweak * Update description [skip ci] * Php Inspections (EA Ultimate): CS	7 years ago
Vladimir Reznichenko	f10cb6aeee	SCA with Php Inspections (EA Ultimate)	7 years ago
Carsten Brandt	e493843b1c	improve `@deprecated` annotations	7 years ago
Alexander Makarov	7bafb7bf09	Fixes #14488 : Added support for X-Forwarded-Host to `yii\web\Request`, fixed `getServerPort()` usage	7 years ago
Paul Klimov	acce1db53b	Fixes #14135 : Fixed `yii\web\Request::getBodyParam()` crashes on object type body params	7 years ago
Alexander Makarov	0b413b0e08	Fixed PHP 5.4 compatibility	7 years ago
Sam	4d388f6cd2	Fixes #15317 : Regenerate CSRF token if an empty value is given	7 years ago
Alexander Makarov	2d672b6722	release version 2.0.13	7 years ago
SilverFire - Dmitry Naumenko	d11bed5340	Minor, added strict comparsion	7 years ago
SilverFire - Dmitry Naumenko	ea2c475ea7	Moved `HTTP_AUTHORIZATION` header check to `\yii\web\Request`, added docs Closes #13564	7 years ago
Alexander Makarov	3ee7629f13	Fixes #13486 : Use DI container to instantiate cookies in order to be able to set defaults	7 years ago
SilverFire - Dmitry Naumenko	1ce796ef0f	Removed ability to define a hostname as trusted because of possible security issues Closes #14691	7 years ago
Carsten Brandt	1278b018fa	Add IIS specific header to secure headers (#14715 ) See https://github.com/yiisoft/yii2/issues/14400#issuecomment-324233065 for more details.	7 years ago
Carsten Brandt	9e713dba29	break if a matching trusted host is found fix for https://github.com/yiisoft/yii2/pull/13780#discussion_r134186910 thanks to @krukru ! PR #13780	7 years ago
Robert Korulczyk	5a8c3d537b	Enable `phpdoc_summary` rule in php-cs-fixer config (#14675 ) * Enable `phpdoc_summary` rule in php-cs-fixer config. * Fix case in "PHPDoc".	7 years ago
Robert Korulczyk	1501c659ac	Add empty lines before return statements. (#14682 ) [skip ci]	7 years ago
Robert Korulczyk	b99e955627	Fix CS (#14665 ) * Run php-cs-fixer. * Enable phpdoc_types rule.	7 years ago
Sam	0017d9c660	Fixes #13780 : Added support for trusted proxies in `yii\web\Request`	7 years ago
Alexander Makarov	648971a82b	Fixes #14542 : Ensured only ASCII characters are in CSRF cookie value since binary data causes issues with ModSecurity and some browsers	7 years ago
PowerGamer1	8a6f5829d4	Fix for invalid example in Request phpdoc [skip ci]	7 years ago
Alexander Makarov	d38908fc13	Fixed #14469 : updated RFC links	7 years ago
yyxx9988	46bf3c410a	Add `yii\web\Request::getOrigin()` method that returns HTTP_ORIGIN of current CORS request >The Origin request header indicates where a fetch originates from. It doesn't include any path information, but only the server name. It is sent with CORS requests, as well as with POST requests. It is similar to the Referer header, but, unlike this header, it doesn't disclose the whole path. From https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Origin Working code samples ```php <?php // We'll be granting access to only the arunranga.com domain // which we think is safe to access this resource as application/xml if($_SERVER['HTTP_ORIGIN'] == "http://arunranga.com") { header('Access-Control-Allow-Origin: http://arunranga.com'); header('Content-type: application/xml'); readfile('arunerDotNetResource.xml'); } else { header('Content-Type: text/html'); echo "<html>"; echo "<head>"; echo " <title>Another Resource</title>"; echo "</head>"; echo "<body>", "<p>This resource behaves two-fold:"; echo "<ul>", "<li>If accessed from <code>http://arunranga.com</code> it returns an XML document</li>"; echo "<li>If accessed from any other origin including from simply typing in the URL into the browser's address bar,"; echo "you get this HTML document</li>", "</ul>", "</body>", "</html>"; } ?> ``` See https://developer.mozilla.org/en-US/docs/Web/HTTP/Server-Side_Access_Control for more info. close #13835	7 years ago
Robert Korulczyk	ba0ab403b5	Added php-cs-fixer coding standards validation to Travis CI (#14100 ) * php-cs-fixer: PSR2 rule. * php-cs-fixer: PSR2 rule - fix views. * Travis setup refactoring. * Add php-cs-fixer to travis cs tests. * Fix tests on hhvm-3.12 * improve travis config * composer update * revert composer update * improve travis config * Fix CS. * Extract config to separate classes. * Extract config to separate classes. * Add file header. * Force short array syntax. * binary_operator_spaces fixer * Fix broken tests * cast_spaces fixer * concat_space fixer * dir_constant fixer * ereg_to_preg fixer * function_typehint_space fixer * hash_to_slash_comment fixer * is_null fixer * linebreak_after_opening_tag fixer * lowercase_cast fixer * magic_constant_casing fixer * modernize_types_casting fixer * native_function_casing fixer * new_with_braces fixer * no_alias_functions fixer * no_blank_lines_after_class_opening fixer * no_blank_lines_after_phpdoc fixer * no_empty_comment fixer * no_empty_phpdoc fixer * no_empty_statement fixer * no_extra_consecutive_blank_lines fixer * no_leading_import_slash fixer * no_leading_namespace_whitespace fixer * no_mixed_echo_print fixer * no_multiline_whitespace_around_double_arrow fixer * no_multiline_whitespace_before_semicolons fixer * no_php4_constructor fixer * no_short_bool_cast fixer * no_singleline_whitespace_before_semicolons fixer * no_spaces_around_offset fixer * no_trailing_comma_in_list_call fixer * no_trailing_comma_in_singleline_array fixer * no_unneeded_control_parentheses fixer * no_unused_imports fixer * no_useless_return fixer * no_whitespace_before_comma_in_array fixer * no_whitespace_in_blank_line fixer * not_operator_with_successor_space fixer * object_operator_without_whitespace fixer * ordered_imports fixer * php_unit_construct fixer * php_unit_dedicate_assert fixer * php_unit_fqcn_annotation fixer * phpdoc_indent fixer * phpdoc_no_access fixer * phpdoc_no_empty_return fixer * phpdoc_no_package fixer * phpdoc_no_useless_inheritdoc fixer * Fix broken tests * phpdoc_return_self_reference fixer * phpdoc_single_line_var_spacing fixer * phpdoc_single_line_var_spacing fixer * phpdoc_to_comment fixer * phpdoc_trim fixer * phpdoc_var_without_name fixer * psr4 fixer * self_accessor fixer * short_scalar_cast fixer * single_blank_line_before_namespace fixer * single_quote fixer * standardize_not_equals fixer * ternary_operator_spaces fixer * trailing_comma_in_multiline_array fixer * trim_array_spaces fixer * protected_to_private fixer * unary_operator_spaces fixer * whitespace_after_comma_in_array fixer * `parent::setRules()` -> `$this->setRules()` * blank_line_after_opening_tag fixer * Update finder config. * Revert changes for YiiRequirementChecker. * Fix array formatting. * Add missing import. * Fix CS for new code merged from master. * Fix some indentation issues.	7 years ago
Carsten Brandt	be658f82bf	release version 2.0.12	7 years ago
Alexander Makarov	b04ff959ce	Fixed misleading docs about encoded URIs [skip ci]	8 years ago
Sam Mousa	183ebc5985	Revert "Moved serialization of `Cookie` to `Cookie`. Added unit test for serialization / deserialization." This reverts commit `a2acd88efe`.	8 years ago
Alexander Makarov	43edf24123	Eliminated else branches in yii\web\Request	8 years ago
Sam Mousa	8ae207c3a1	Fixes #13837 : Refactored masking of CSRF tokens	8 years ago
Sam Mousa	a2acd88efe	Moved serialization of `Cookie` to `Cookie`. Added unit test for serialization / deserialization.	8 years ago
Carsten Brandt	c19b2f7dc8	release version 2.0.11	8 years ago
Klimov Paul	7da77c3d5a	created `HostControl` filter to prevent Host header attacks fixes #13050 close #13063	8 years ago
Carsten Brandt	a498dedb5c	Added documentation about Host header attack (#13073 ) * Added documentation about Host header attack Added info about Host header attack (#13050) to the guide and the Request class. When we introduce a filter or property to protect against this, these sections should be updated to link to that option.	8 years ago
Robert Korulczyk	4aa935e69e	Fixes #12055 : Changed `boolean` to `bool` and `integer` to `int` in phpdoc	8 years ago
Boudewijn Vahrmeijer	32f4dc8997	Fixes #5385 : links created from classes to corresponding guide articles (#12920 )	8 years ago
Carsten Brandt	11fe407ad0	release version 2.0.10	8 years ago
Robert Korulczyk	63f95fa3ad	Fixes #11309 : Added `yii\web\Request::getHostName()` method that returns hostname of current request	8 years ago
Klimov Paul	ed0603b706	Fixed `yii\web\Request::getBodyParams()` does not pass full 'content-type' value to `yii\web\RequestParserInterface::parse()`	8 years ago
Carsten Brandt	17d08cc0a4	fixed crash on non-string input to CSRF token fixes #11822 also adding proper unit tests for validate CSRF token.	8 years ago
cuiliang	c0df003ac0	merge from master	8 years ago
Nikola Kovacs	9d327baa8b	coding style fixes	8 years ago
Salem Ouerdani	2eb90f82fe	removes nonexistent yii/web/rawCsrfToken from docs (#11521 ) * removes nonexistent yii/web/rawCsrfToken from docs * maj	9 years ago
Carsten Brandt	731769241b	release version 2.0.8	9 years ago
Carsten Brandt	1f0e24c528	allow resetting autodetected properties in yii\web\Request fixes #11336	9 years ago
Evgeniy Tkachenko	4e59f92829	phpDoc updated	9 years ago
quantum	7b46bd1f7c	Fixes #10451 : Check of existence of `$_SERVER` in `\yii\web\Request` before using it	9 years ago
Carsten Brandt	9b5f6cb188	prepare for 2.0.7 release - adjust version - build classmap - build phpdoc @property annotations - build mime-type file	9 years ago
Evgeniy Tkachenko	8b9514fd5f	Refactoring yii\web\Request::getMethod	9 years ago
SilverFire - Dmitry Naumenko	cd87d67f34	Global DOCS update: ~~~ replaced with ```	9 years ago
Alexander Makarov	5ab4f0f090	Better quotes usage in strings - Use single quote where interpolation isn't necessary - Use interpolation when it's better than concatenation	9 years ago

1 2 3 4

157 Commits (643ef6f820782b43a4a7f6d57298bb138bfdc9b1)