Repository navigation

Fixed security issues - #247

Merged

rxtur merged 3 commits into

BlogEngine:masterfrom

0xLanks:fix-security-issues

May 6, 2022

Merged

Fixed security issues#247
rxtur merged 3 commits into
BlogEngine:masterfrom
0xLanks:fix-security-issues

Commits on May 5, 2022
- Added 'SameSite=Strict' cookie attribute, reducing overall CSRF attack surface
  
  0xLanks
  authored and
  0xLanks
  committed
  4033c72
- Fixed XXE vulnerability when importing a new blog
  
  0xLanks
  authored and
  0xLanks
  committed
  16343de
- Fixed authorization controls on controller actions and added path sanitization preventing path traversal
  
  0xLanks
  authored and
  0xLanks
  committed
  035bc37