ILIAS  trunk Revision v11.0_alpha-3011-gc6b235a2e85
ilCtrlSecurityInterface Interface Reference

This file is part of ILIAS, a powerful learning management system published by ILIAS open source e-Learning e.V. More...

+ Inheritance diagram for ilCtrlSecurityInterface:
+ Collaboration diagram for ilCtrlSecurityInterface:

Public Member Functions

 getUnsafeGetCommands ()
 This method must return a list of unsafe GET commands. More...
 
 getSafePostCommands ()
 This method must return a list of safe POST commands. More...
 

Detailed Description

This file is part of ILIAS, a powerful learning management system published by ILIAS open source e-Learning e.V.

ILIAS is licensed with the GPL-3.0, see https://www.gnu.org/licenses/gpl-3.0.en.html You should have received a copy of said license along with the source code, too.

If this is not the case or you just want to try ILIAS, you'll find us at: https://www.ilias.de https://github.com/ILIAS-eLearning Interface ilCtrlSecurityInterface provides ilCtrl security information.

Author
Thibeau Fuhrer thf@s.nosp@m.tude.nosp@m.r-rai.nosp@m.mann.nosp@m..ch

Information gathered by this interface is stored in an artifact as well. Currently, the only purpose is to gather a list of safe commands which determines whether a CSRF-protection is necessary.

Definition at line 29 of file interface.ilCtrlSecurityInterface.php.

Member Function Documentation

◆ getSafePostCommands()

ilCtrlSecurityInterface::getSafePostCommands ( )

◆ getUnsafeGetCommands()

ilCtrlSecurityInterface::getUnsafeGetCommands ( )

This method must return a list of unsafe GET commands.

Unsafe get commands returned by this method will now be CSRF protected, which means an ilCtrlToken is appended each time a link-target is generated to the class implementing this interface with a command from that list.

Tokens will be validated in

See also
ilCtrlInterface::getCmd(), whereas the fallback command will be used if the CSRF validation fails.
Returns
string[]

Implemented in ilAuthPageEditorGUI, ilBadgeManagementGUI, ilBadgeProfileGUI, ilObjBadgeAdministrationGUI, ilObjChatroomGUI, ilObjComponentSettingsGUI, ilContactGUI, ilMailingListsGUI, ilMailMemberSearchGUI, ilForumModeratorsGUI, ilForumSettingsGUI, ilObjForumGUI, ilPasswordAssistanceGUI, ilStartUpGUI, ilLDAPSettingsGUI, ilLMPresentationGUI, ilMailAttachmentGUI, ilMailFolderGUI, ilMailTemplateGUI, ilRatingCategoryGUI, ilRatingGUI, ilSamlSettingsGUI, and ilCtrlCommandClass1TestGUI.


The documentation for this interface was generated from the following file: