hardening: enforce POST+CSRF for purge syslog devices utility - #318

Merged

TheWitness merged 20 commits into

Cacti:developfrom

somethingwithproof:fix/259-csrf-purge-utility

Sep 14, 2026

Commits on Sep 4, 2026

hardening: enforce POST+CSRF for purge syslog devices utility
somethingwithproof
committed
aa00095
fix(csrf): distinct error codes, audit log on non-POST, honest lint header
somethingwithproof
committed
9bc39fc
fix(security): harden syslog bulk form and nav encoding
somethingwithproof
committed
0ba5b32
Update syslog_alerts.php

TheWitness
authored and
somethingwithproof
committed
5a120cd
Refactor navigation bar URL in syslog_removal.php

TheWitness
authored and
somethingwithproof
committed
f22cfc4
Fix navigation bar URL in syslog_reports.php

TheWitness
authored and
somethingwithproof
committed
93fca4c
Address Syslog purge security review
somethingwithproof
committed
330497b
Preserve Syslog filter navigation safely
somethingwithproof
committed
4a391aa
Strengthen Syslog CSRF regression coverage
somethingwithproof
committed
3837c56
Use runner PHP without versioned Apache package
somethingwithproof
committed
ba77288
refactor: reuse syslog JSON script encoder
somethingwithproof
committed
fb74143
Modernize CSRF hardening for PHP 8.0
somethingwithproof
committed
62b7576
ci: repair the integration workflow
somethingwithproof
committed
075e077
refactor: rename the JSON script encoder to syslog_json_safe
somethingwithproof
committed
3c6ccc5
fix: keep the purge post headerless
somethingwithproof
committed
fb4b20a
refactor: drop the nav bar filter encoding from this branch
somethingwithproof
committed
3ae858d
test: drive the purge guard instead of grepping for it
somethingwithproof
committed
863c3fe
docs: record issue#259 in the changelog
somethingwithproof
committed
5b44732
style: space the closing php tags like the rest of the repo
somethingwithproof
committed
ccf0c99

Commits on Sep 14, 2026

Merge branch 'develop' into fix/259-csrf-purge-utility
TheWitness
authored
c858d6a

Navigation Menu

Uh oh!

hardening: enforce POST+CSRF for purge syslog devices utility - #318

hardening: enforce POST+CSRF for purge syslog devices utility#318
TheWitness merged 20 commits into
Cacti:developfrom
somethingwithproof:fix/259-csrf-purge-utility

Commits on Sep 4, 2026

hardening: enforce POST+CSRF for purge syslog devices utility

fix(csrf): distinct error codes, audit log on non-POST, honest lint header

fix(security): harden syslog bulk form and nav encoding

Update syslog_alerts.php

Refactor navigation bar URL in syslog_removal.php

Fix navigation bar URL in syslog_reports.php

Address Syslog purge security review

Preserve Syslog filter navigation safely

Strengthen Syslog CSRF regression coverage

Use runner PHP without versioned Apache package

refactor: reuse syslog JSON script encoder

Modernize CSRF hardening for PHP 8.0

ci: repair the integration workflow

refactor: rename the JSON script encoder to syslog_json_safe

fix: keep the purge post headerless

refactor: drop the nav bar filter encoding from this branch

test: drive the purge guard instead of grepping for it

docs: record issue#259 in the changelog

style: space the closing php tags like the rest of the repo

Commits on Sep 14, 2026

Merge branch 'develop' into fix/259-csrf-purge-utility