Most SessionProviderInterface implementations require CSRF protection, but some (notably MWOAuthSessionProvider from the OAuth extension) do not. Add a function for the implementing class to indicate whether or not the provider is safe against CSRF protection. Bug: T237852 Change-Id: Ib452b6c75aa7d40dd211a6064f97509b664c3ffc |
||
|---|---|---|
| .. | ||
| BotPasswordSessionProviderTest.php | ||
| CookieSessionProviderTest.php | ||
| ImmutableSessionProviderWithCookieTest.php | ||
| PHPSessionHandlerTest.php | ||
| SessionBackendTest.php | ||
| SessionInfoTest.php | ||
| SessionManagerTest.php | ||
| SessionProviderTest.php | ||
| SessionTest.php | ||
| TestBagOStuff.php | ||
| TestUtils.php | ||
| UserInfoTest.php | ||