Commit Graph

12 Commits

Author SHA1 Message Date
Christian Lück
dc9945f2a3 Support bypassing Host check
An empty $httpHost can be passed to circumvent checking Host header.
2014-05-19 15:15:09 +02:00
Grégoire Pineau
3a8578bd17 CS (eof_ending) 2014-03-21 16:46:43 +01:00
Chris Boden
3dc69de9d3 Enforce UTF-8 in App (disallow mbstring.func_overload) 2014-02-06 07:54:56 -05:00
Chris Boden
bf61fdbed4 [App] Use trigger_error instead of echo 2014-01-29 06:55:07 -05:00
Bramus
b48f0fa6fd Asterisk must be quoted inside array() 2013-11-05 17:34:15 +01:00
Chris Boden
4039a643ea API docs on new features 2013-07-22 21:03:19 -04:00
Chris Boden
eb77cf139e Updated example, slight Origin order change in app 2013-07-20 22:03:46 -04:00
Chris Boden
f50af83fa7 [Http][Security] OriginCheck + same host/origin policy
Added the Http\OriginCheck component that will only allow connections coming from desired Origins
Same host+origin policy by default: App.php, by default, will only allow connections from the given hostname
Fixes #102
2013-07-20 18:41:08 -04:00
Chris Boden
b658ae6e7e Composer restrictions + update 2013-07-20 11:11:34 -04:00
Chris Boden
e7541fdfcf App uses counter for ID instead of random 2013-06-15 14:09:19 -04:00
Chris Boden
0edd37af3f Hostname check verification refs #102
host parameter of App now verified on incoming connections
2013-06-09 14:09:57 -04:00
Chris Boden
8b3591ce0d App class 2013-05-08 20:44:01 -04:00