adding enhanced csrf protection

2026-05-06 09:07:48 +02:00
parent 7ae7df0a11
commit d82a08f77b
25 changed files with 132 additions and 7 deletions
@@ -6,6 +6,7 @@ header('Content-Type: application/json');
 include "../utils/security.php";
 secure_session_start();
 require_same_origin_request();
+require_csrf_token();

 require_once 'WebAuthn.php';