5 Commits

Author	SHA1	Message	Date
Matias Griese	853abfbbd3	Fixed X-Frame-Options to be DENY in all admin pages to prevent a clickjacking attack	2021-09-01 13:17:21 +03:00
Matias Griese	f36b244198	Include query param task into task checks	2021-03-26 18:15:42 +02:00
Matias Griese	aa4f80eec1	Greatly improve login related actions for Admin ... * Better isolate admin to prevent session related vulnerabilities * Removed support for custom login redirects for improved security * Shorten forgot password link lifetime from 7 days to 1 hour * Fixed login related pages being accessible from admin when user has logged in * Fixed admin user creation and password reset allowing unsafe passwords * Fixed missing validation when registering the first admin user * Fixed reset password email not to have session specific token in it	2021-03-26 14:39:37 +02:00
Matias Griese	d9c73e2edb	Post merge conflicts	2020-12-01 09:51:43 +02:00
Matias Griese	902447a50c	WIP: Added new controller for admin	2019-06-18 12:15:58 +03:00