Skip to content

Releases: paragonie/anti-csrf

Version 2.4.0

08 May 16:58
v2.4.0
Compare
Choose a tag to compare

What's Changed

  • Migrate from Travis CI to Github Actions by @paragonie-security in #43
  • fix: replaced Twig_SimpleFunction with \Twig\TwigFunction by @manofstrong in #48
  • Add lockTo parameter to validateRequest method by @enfoqueNativo in #47
  • API for throwing exceptions by @Kekos in #46
  • Removed duplicate string check for index and token by @Kekos in #39
  • Fix Reusable deleteToken by @tecome in #44
  • validateRequest() method must call validateRequestOrThrow() by @Kekos in #50
  • Added unsetToken and unsetSessionIndex methods to AntiCSRF class by @jeijei4 in #53
  • Some optimizations in the Reusable.php class by @jeijei4 in #52

New Contributors

Full Changelog: v2.3.0...v2.4.0

Version 2.3.0

03 Dec 14:38
v2.3.0
Compare
Choose a tag to compare
  • Installs on PHP 8

Version 2.2.1

03 Jan 21:25
v2.2.1
Compare
Choose a tag to compare

Fix Psalm errors.

Version 2.2.0

18 Feb 22:11
v2.2.0
Compare
Choose a tag to compare

Fixed type-safety issues and code redundancy.

Version 1.0.1

18 Feb 22:10
v1.0.1
Compare
Choose a tag to compare

Merged #29, fixed unit tests.

Paragon will no longer be providing support for the v1.x branch of Anti-CSRF, or to versions of PHP older than 7.1. Learn more about our efforts to make the PHP ecosystem embrace newer versions of the programming language..

Version 2.1.0

22 Nov 21:27
v2.1.0
Compare
Choose a tag to compare
  • Changed encoding mode from Base64 to Base64UrlSafe.
  • Added a Reusable variant to the AntiCSRF class, for use with AJAX forms.
  • #20 - Implemented better support for front-controller URIs by allowing REQUEST_URI to be swapped out for PATH_INFO.

Version 2.0.2

06 Nov 02:33
v2.0.2
Compare
Choose a tag to compare

Fix some errors with PHP 7.2 compatibility with $_SESSION.

Version 2.0.1

06 Nov 10:01
v2.0.1
Compare
Choose a tag to compare

Fixes typos and a return type declaration.

Version 2.0.0

23 Apr 01:28
Compare
Choose a tag to compare

Version 2 requires PHP 7.0+ and uses strict types.

Otherwise, it's fundamentally identical to Version 1.

Version 1.0.0

23 Apr 01:20
Compare
Choose a tag to compare

Version 1 is stable. Maintains support for PHP 5.