fix(manager): close CSRF gaps, escape log filters and neutralise test payloads - #2478

Merged

Seiger merged 5 commits into

evolution-cms:3.5.xfrom

elcreator:fix-xss-and-payloads-in-tests

Sep 27, 2026

Commits on Sep 26, 2026

fix(manager): guard role, permission and category deletes and escape log filters

elcreator
and
claude
committed
67c8484
upd(tests): replace antivirus-flagged payloads in security tests

elcreator
and
claude
committed
dec8ea7
fix(manager): require a CSRF token for the OPcache reset

elcreator
and
claude
committed
ab52b94
fix(manager): require CSRF tokens for logout and module dependency changes

elcreator
and
claude
committed
0adb94d
fix(manager): escape web user, page title and category manager output

elcreator
and
claude
committed
5258636