Branch: refs/heads/csrf-multiple-tokens
Home: https://github.com/postfixadmin/postfixadmin
Commit: bcef3da899f0ddbfebe4ad2b6bbacf2062f122a7
https://github.com/postfixadmin/postfixadmin/commit/bcef3da899f0ddbfebe4ad2b6bbacf2062f122a7
Author: David Goodwin <da...@co...>
Date: 2026-02-28 (Sat, 28 Feb 2026)
Changed paths:
M functions.inc.php
A model/CsrfToken.php
M model/PFASmarty.php
M public/broadcast-message.php
M public/delete.php
M public/edit.php
M public/editactive.php
M public/list.php
M public/login-mfa.php
M public/login.php
M public/sendmail.php
M public/users/app-passwords.php
M public/users/edit-alias.php
M public/users/login-mfa.php
M public/users/login.php
M public/users/password.php
M public/users/totp-exceptions.php
M public/users/totp.php
M public/vacation.php
M templates/app-passwords.tpl
M templates/backupwarning.tpl
M templates/broadcast-message.tpl
M templates/editform.tpl
M templates/list-virtual_mailbox.tpl
M templates/list.tpl
M templates/login-mfa.tpl
M templates/login.tpl
M templates/password-change.tpl
M templates/password.tpl
M templates/sendmail.tpl
M templates/totp-exceptions.tpl
M templates/totp.tpl
M templates/users_edit-alias.tpl
M templates/vacation.tpl
Log Message:
-----------
initial attempt at supporting multiple concurrent tabs open (have a list of csrf tokens in $_SESSION, add a smarty function {CSRF_Token} ... and CsrfToken class to try and uniify behaviour; needs testing!
Commit: 84cea60da6214e21dbe81b813e9e3d5cef2d1f04
https://github.com/postfixadmin/postfixadmin/commit/84cea60da6214e21dbe81b813e9e3d5cef2d1f04
Author: David Goodwin <da...@co...>
Date: 2026-02-28 (Sat, 28 Feb 2026)
Changed paths:
M model/PFASmarty.php
Log Message:
-----------
psalm fix for closure return type
Commit: f40ddef23812e9d31474922d94b1b8b403f65381
https://github.com/postfixadmin/postfixadmin/commit/f40ddef23812e9d31474922d94b1b8b403f65381
Author: David Goodwin <da...@co...>
Date: 2026-02-28 (Sat, 28 Feb 2026)
Changed paths:
M functions.inc.php
M model/CsrfToken.php
Log Message:
-----------
formatting
Commit: 031201660ead8460ccf7d43b8767a1c97b215269
https://github.com/postfixadmin/postfixadmin/commit/031201660ead8460ccf7d43b8767a1c97b215269
Author: David Goodwin <da...@co...>
Date: 2026-02-28 (Sat, 28 Feb 2026)
Changed paths:
M model/CsrfToken.php
M model/PFASmarty.php
M public/broadcast-message.php
M public/delete.php
M public/edit.php
M public/editactive.php
M public/login-mfa.php
M public/login.php
M public/sendmail.php
M public/users/app-passwords.php
M public/users/edit-alias.php
M public/users/login-mfa.php
M public/users/login.php
M public/users/password.php
M public/users/totp-exceptions.php
M public/users/totp.php
M public/vacation.php
Log Message:
-----------
CsrfToken -> make methods static, refactor code a little
Commit: ddaa85b109c92169bc3cc626a7ccc738ada03aec
https://github.com/postfixadmin/postfixadmin/commit/ddaa85b109c92169bc3cc626a7ccc738ada03aec
Author: David Goodwin <da...@co...>
Date: 2026-02-28 (Sat, 28 Feb 2026)
Changed paths:
M public/backup.php
Log Message:
-----------
fix bugs in backup (table ordering, missing ";"), try and improve formatting
Commit: 29defb0ca968861ada089b2a41aeabcc231ec657
https://github.com/postfixadmin/postfixadmin/commit/29defb0ca968861ada089b2a41aeabcc231ec657
Author: David Goodwin <da...@co...>
Date: 2026-02-28 (Sat, 28 Feb 2026)
Changed paths:
M common.php
A model/CsrfInvalidException.php
M model/Languages.php
A tests/CsrfTokenTest.php
Log Message:
-----------
remove unwanted namespace on Languages class
Commit: a49b2970e13c2c846660af6f5b5ddfb2ea756516
https://github.com/postfixadmin/postfixadmin/commit/a49b2970e13c2c846660af6f5b5ddfb2ea756516
Author: David Goodwin <da...@co...>
Date: 2026-02-28 (Sat, 28 Feb 2026)
Changed paths:
M model/AdminpasswordHandler.php
M public/backup.php
M public/delete.php
M public/edit.php
M public/editactive.php
M public/list-virtual.php
M public/list.php
M public/users/edit-alias.php
M public/users/password-change.php
M public/users/password-recover.php
M public/vacation.php
M public/viewlog.php
Log Message:
-----------
remove calls to die(), throw an Exception instead.
Commit: 47d08126d803771c6b500f3fce09ed962df239d7
https://github.com/postfixadmin/postfixadmin/commit/47d08126d803771c6b500f3fce09ed962df239d7
Author: David Goodwin <da...@co...>
Date: 2026-02-28 (Sat, 28 Feb 2026)
Changed paths:
M model/CsrfToken.php
M public/delete.php
M public/login-mfa.php
Log Message:
-----------
fix issues copilot found (wrong variable names, make sure $_SESSION['PFA_Tokens'] is an array etc)
Commit: 89d2f94019ed32cb03ca01c84749d02df1bba6cf
https://github.com/postfixadmin/postfixadmin/commit/89d2f94019ed32cb03ca01c84749d02df1bba6cf
Author: David Goodwin <da...@co...>
Date: 2026-02-28 (Sat, 28 Feb 2026)
Changed paths:
M model/CsrfToken.php
M tests/CsrfTokenTest.php
Log Message:
-----------
add unit test for CsrfToken class
Commit: 7d1ce7eb2f2e7038ae6aa8e97012ad5a9e510023
https://github.com/postfixadmin/postfixadmin/commit/7d1ce7eb2f2e7038ae6aa8e97012ad5a9e510023
Author: David Goodwin <da...@co...>
Date: 2026-02-28 (Sat, 28 Feb 2026)
Changed paths:
M public/common.php
Log Message:
-----------
add a generic exception handler in public/common.php, so we can try and output something friendly if something goes wrong
Commit: 1dd0c12469da710b37f263c42a1b9ba87aa09280
https://github.com/postfixadmin/postfixadmin/commit/1dd0c12469da710b37f263c42a1b9ba87aa09280
Author: David Goodwin <da...@co...>
Date: 2026-02-28 (Sat, 28 Feb 2026)
Changed paths:
M model/CsrfInvalidException.php
Log Message:
-----------
fix CsrfInvalidIException class
Commit: 01471ceec2e2962a28cd9f63a11dd5bba3a9936d
https://github.com/postfixadmin/postfixadmin/commit/01471ceec2e2962a28cd9f63a11dd5bba3a9936d
Author: David Goodwin <da...@co...>
Date: 2026-02-28 (Sat, 28 Feb 2026)
Changed paths:
M model/Login.php
M psalm.xml
M public/common.php
M public/editactive.php
M public/login.php
M public/viewlog.php
M tests/CsrfTokenTest.php
Log Message:
-----------
token reformatting
Commit: 41f4f242703d1924d36ad8adeb0dfbd2bc84710e
https://github.com/postfixadmin/postfixadmin/commit/41f4f242703d1924d36ad8adeb0dfbd2bc84710e
Author: David Goodwin <da...@co...>
Date: 2026-02-28 (Sat, 28 Feb 2026)
Changed paths:
M templates/list-virtual_mailbox.tpl
Log Message:
-----------
make the list-virtual_mailbox.tpl be a self contained table, tidy up inclusion in list-virtual.tpl
Commit: 0567b9bfcbe1a3f03bf9b71e6d9f31452b25ecf5
https://github.com/postfixadmin/postfixadmin/commit/0567b9bfcbe1a3f03bf9b71e6d9f31452b25ecf5
Author: David Goodwin <da...@co...>
Date: 2026-02-28 (Sat, 28 Feb 2026)
Changed paths:
M composer.json
Log Message:
-----------
stop caching phpunit results
Compare: https://github.com/postfixadmin/postfixadmin/compare/e8a33760875b...0567b9bfcbe1
To unsubscribe from these emails, change your notification settings at https://github.com/postfixadmin/postfixadmin/settings/notifications
|