Add app/bugList/views_bug.txt and fix some xss bug on blogpost
Merge branch 'master' of https://bitbucket.org/xelfix24/astrospace
Fix xss bug on views/statistic
Add DOM-base XSS on user search
Add attack.txt: Mixed content vulnerability
Minor addition to mixed content attack
Add Reflected XSS on admin_edit_info (both pass XSSAuditor and not)
Merge branch 'master' of https://bitbucket.org/xelfix24/astrospace
Add CSRF with no token attack short description
Merge branch 'master' of bitbucket.org:xelfix24/astrospace
Secure PUT verbs against CSRF attack (except ThemesController)
Add setupSMTP.txt which explain on how to setup local SMTP server. Additionally add commented configuration in mail.php and User.php for the local SMTP server.
Add simple clickjacking
Add Exploit folder and put exploit description there
Merge branch 'master' of https://bitbucket.org/xelfix24/astrospace
Enable remote code execution
Describe the attack
Merge branch 'master' of bitbucket.org:xelfix24/astrospace
Add more security to invite to videoCall and change implementation from exist() to count(). Also give more warning message.
Make it a bit harder to find sanitize bug