wallabag/tests/Wallabag/CoreBundle
Kevin Decherf aa06e8328e ConfigController: remove 2fa cancel step
This change annoys me, however this endpoint was anyway problematic:
- it was vulnerable to a CSRF attack, see GHSA-56fm-hfp3-x3w3
- it is useless as we don't really handle a two-steps validation

Still, if you send an incorrect code during the "activation" phase a
flash error will pop up but the 2fa will stay enabled. This need rework
when possible.

Signed-off-by: Kevin Decherf <kevin@kdecherf.com>
2023-09-30 00:49:58 +02:00
..
Command Update all Doctrine deps 2022-12-16 10:29:42 +01:00
Controller ConfigController: remove 2fa cancel step 2023-09-30 00:49:58 +02:00
Entity Use lang attribute 2020-01-23 21:21:54 +01:00
Event Replace GetResponseEvent by RequestEvent 2023-08-07 22:34:47 +01:00
fixtures Add support to download SVG locally 2022-10-18 11:14:45 +02:00
Form/DataTransformer Add missing TestCase namespace 2017-12-18 13:29:33 +01:00
GuzzleSiteAuthenticator Upgrade to Symfony 4.4 2022-11-29 18:01:46 -08:00
Helper Merge pull request #6562 from Simounet/fix/downloadimages-redirect-following 2023-05-31 15:04:02 +02:00
ParamConverter Update to FOSUserBundle 3.1 2022-12-14 09:42:17 +01:00
Tools Counting two characters together as a word in CJK 2019-01-06 01:21:13 +08:00
Twig Move to controller as a service 2022-12-19 10:38:08 +01:00
WallabagCoreTestCase.php Merge pull request #6813 from yguedidi/replace-client-by-kernelbrowser 2023-08-08 23:36:06 +02:00