 tim
|
71f768bff2
|
Log out with a POST form.
The logout link put the CSRF token in the URL, which goes into logs and the browser history.
|
2026-09-26 15:27:51 +02:00 |
|
|
tim
|
ed8918e7fd
|
Refuse session ids that PHP did not make.
|
2026-09-26 15:27:51 +02:00 |
|
|
tim
|
30b275b902
|
Send HSTS on HTTPS pages.
|
2026-09-26 15:27:51 +02:00 |
|
|
tim
|
b6a1eff3e6
|
Stop other sites from framing the pages.
|
2026-09-26 15:27:51 +02:00 |
|
|
tim
|
5d657d7e45
|
Take the site address from SITE_URL.
The feed links, the notification email, the webmaster address and the cookie domain now use it.
|
2026-09-26 15:27:51 +02:00 |
|
|
tim
|
ed959888b4
|
Add PHP unit tests and page tests.
Run "composer install", then "composer test".
|
2026-09-26 03:48:09 +02:00 |
|