winter

mirror of https://github.com/wintercms/winter.git synced 2024-06-28 05:33:29 +02:00

History

Ayumi Hamasaki dd53206a82 Service Workers Invalid security token and Clear Site Data HTTP Header (#4088 )

If a website has a Service Worker installed it would load and register before a User tries to login to the backend causing a "Invalid security token" message. This PR unregisters any installed Service Worker when a User opens the backend Signin webpage.

I have also added the NEW Security Headers to add Protection to October's Cache and Cookies. This includes two new Middleware that first clears any bad cached data before a User tries to login and the second Middleware will clear all the sensitive User Data when a User signs out of the Backend.

For more info on the new Security Header 'Clear Site Data' you can see the spec found here: https://www.w3.org/TR/clear-site-data/

Fixes #4076, fixes #3707.

2019-03-01 16:22:18 -06:00

assets

Service Workers Invalid security token and Clear Site Data HTTP Header (#4088 )

2019-03-01 16:22:18 -06:00

behaviors

Fire backend.list.extendRecords event during export useList (#4148 )

2019-02-19 17:14:32 -06:00

classes

Add Closure use declaration (#4170 )

2019-02-28 14:54:00 +02:00

controllers

Service Workers Invalid security token and Clear Site Data HTTP Header (#4088 )