Commit graph

4 commits

Author SHA1 Message Date
robvde
38592df9e6 As are result of security penetration test the following changes applied:
All authentication related cookies tagged as httpOnly
web.config: enabledVersionHeader=false
autocomplete disabled
Login url injection redirection fixed
session hijacking implemented

Dont forget to apply ssl to your website with https and to set the requireSSL="false" to true
2012-06-21 19:39:58 +04:00
omara
5326d4ff26 Update Outercurve Copyright to 2012 in all files 2012-06-04 22:14:11 -04:00
ptsurbeleu
4a16ca9524 Fixed issue with removing folders, users and groups in HeliconApe for a web site;
Added checks values conversion utility routines to avoid perf hits caused by exceptions being thrown;
2012-02-08 19:06:20 -08:00
ptsurbeleu
b03b0b373f Initial project's source code check-in. 2011-07-13 16:07:32 -07:00