Fix/273 hardening - #179

Merged

mambax7 merged 10 commits into

XOOPS:masterfrom

mambax7:fix/273-hardening

Aug 24, 2026

Commits on Aug 24, 2026

compat(php86): drop imagedestroy() calls deprecated in PHP 8.5
mambax7
committed
475a750
security(image): close image.php's remote-image branch
mambax7
committed
c6a4825
security(profile): require a session token to log out
mambax7
committed
84b478c
security(redirects): allowlist the query string reflected into Location headers
mambax7
committed
bf27118
security(redirects): rebuild the reflected query string from parsed args
mambax7
committed
b180fcb
security(redirects): share one query-string rebuild and pin it with a test
mambax7
committed
4524341
docs(release): prepare the 2.7.3 Final release documents
mambax7
committed
d84d881
docs(changelog): move post-RC1 work into the 2.7.3 Final section
mambax7
committed
bad9018
tag XOOPS version for the language addition
mambax7
committed
284486b
fix(profile): give the logout confirmation an English fallback string
mambax7
committed
72542d9