Releases: paragonie/anti-csrf
Releases · paragonie/anti-csrf
Version 2.4.0
What's Changed
- Migrate from Travis CI to Github Actions by @paragonie-security in #43
- fix: replaced Twig_SimpleFunction with \Twig\TwigFunction by @manofstrong in #48
- Add lockTo parameter to validateRequest method by @enfoqueNativo in #47
- API for throwing exceptions by @Kekos in #46
- Removed duplicate string check for index and token by @Kekos in #39
- Fix Reusable deleteToken by @tecome in #44
- validateRequest() method must call validateRequestOrThrow() by @Kekos in #50
- Added unsetToken and unsetSessionIndex methods to AntiCSRF class by @jeijei4 in #53
- Some optimizations in the Reusable.php class by @jeijei4 in #52
New Contributors
- @paragonie-security made their first contribution in #43
- @manofstrong made their first contribution in #48
- @enfoqueNativo made their first contribution in #47
- @Kekos made their first contribution in #46
- @tecome made their first contribution in #44
- @jeijei4 made their first contribution in #53
Full Changelog: v2.3.0...v2.4.0
Version 2.3.0
- Installs on PHP 8
Version 2.2.1
Fix Psalm errors.
Version 2.2.0
Fixed type-safety issues and code redundancy.
Version 1.0.1
Merged #29, fixed unit tests.
Paragon will no longer be providing support for the v1.x branch of Anti-CSRF, or to versions of PHP older than 7.1. Learn more about our efforts to make the PHP ecosystem embrace newer versions of the programming language..
Version 2.1.0
- Changed encoding mode from Base64 to Base64UrlSafe.
- Added a Reusable variant to the AntiCSRF class, for use with AJAX forms.
- #20 - Implemented better support for front-controller URIs by allowing
REQUEST_URI
to be swapped out forPATH_INFO
.
Version 2.0.2
Fix some errors with PHP 7.2 compatibility with $_SESSION
.
Version 2.0.1
Fixes typos and a return type declaration.
Version 2.0.0
Version 2 requires PHP 7.0+ and uses strict types.
Otherwise, it's fundamentally identical to Version 1.
Version 1.0.0
Version 1 is stable. Maintains support for PHP 5.