| File: |
aksara/Modules/Addons/Controllers/Modules.php |
| Role: |
Class source |
| Content type: |
text/plain |
| Description: |
Class source |
| Class: |
Aksara
A CodeIgniter based API and CRUD generator |
| Author: |
By Aby Dahana |
| Last change: |
fix: theme and module management #798
Enhancement: Strengthen token lifecycle, file uploads, and formatting
Enhancement: Security Hardening and Page Builder UX Improvements
- Upgraded CSRF, core session checks, and module/theme token validations to use HMAC-SHA256 and constant-time string comparisons (hash_equals).
- Fixed a minor XSS vulnerability in the Page Builder's wysiwyg input by properly escaping raw HTML prior to Markdown parsing.
- Refactored the Page Builder 'insert link' functionality to use a native Bootstrap modal instead of standard browser prompt, along with the ability to edit existing links directly.
- Added blue underline styling for links generated within the Page Builder.
|
| Date: |
5 days ago |
| Size: |
33,700 bytes |
|
|
|
