Fixed security issues#247

Merged

rxtur merged 3 commits intoBlogEngine:masterfrom

0xLanks:fix-security-issues

May 6, 2022

Commits on May 5, 2022

Added 'SameSite=Strict' cookie attribute, reducing overall CSRF attack surface
0xLanks
authored and
0xLanks
committed
Fixed XXE vulnerability when importing a new blog
0xLanks
authored and
0xLanks
committed
Fixed authorization controls on controller actions and added path sanitization preventing path traversal
0xLanks
authored and
0xLanks
committed