Serreau Jovann 25033c29a0 Add automatic CSRF protection on all POST forms ...

- CsrfProtectionSubscriber: auto-injects hidden _csrf_token in HTML responses,
  auto-verifies on POST requests
- Excludes: webhooks, JSON APIs, login (has its own CSRF)
- 9 tests covering all cases (GET, excluded, JSON, no token, invalid, valid, inject, non-HTML)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-22 20:08:02 +01:00

..

Controller

Add resendInvitation tests: success, access denied, not found

2026-03-21 19:23:55 +01:00

Entity

Add offer and commission rate to organizer invitation

2026-03-22 18:24:40 +01:00

Enum

Add PHPUnit tests with coverage for all src classes

2026-03-18 22:50:23 +01:00

EventListener

Display error message on 500 error page

2026-03-20 15:54:26 +01:00

EventSubscriber

Add automatic CSRF protection on all POST forms

2026-03-22 20:08:02 +01:00

js

Add cart test without checkout button for full branch coverage

2026-03-21 17:43:43 +01:00

Message

Add PHPUnit tests with coverage for all src classes

2026-03-18 22:50:23 +01:00

MessageHandler

Add admin panel, Meilisearch buyer search, email redesign, and multiple features

2026-03-19 14:07:07 +01:00

Repository

Fix PHP CS Fixer: remove parentheses on anonymous classes

2026-03-19 00:03:23 +01:00

Security

Fix PHPStan errors and PHP CS Fixer import order

2026-03-19 10:48:54 +01:00

Service

Add OrderIndexService tests and AccountController tickets tab with data test

2026-03-21 18:18:11 +01:00

Twig

Fix test coverage and PHPUnit notices

2026-03-18 23:14:04 +01:00

bootstrap.php

Add webapp packages

2026-03-04 21:52:29 +01:00