Jan-Sebastian Fabík

Application: added CSRF protection for signals using method POST [Closes #469]

3

The [RFC 2616, section 9.1.1](http://tools.ietf.org/search/rfc2616#section-9.1.1) states: > In particular, the convention has been established that the GET and HEAD methods SHOULD NOT have the significance of taking an action other...

Http: added HTTP header with random length to complicate BREACH attack

7

Here's a nice demonstration of BREACH attack: http://resources.infosecinstitute.com/the-breach-attack/

FileStorage: set permissions of files and directories

9

I am still having troubles with issue #1039. It was closed because of umask() problems, but nobody mentioned chmod(). Why cannot FileStorage just get file and directory mode as optional...

Http\RequestFactory: added workaround for exceeded post_max_size

24

http://forum.nette.org/cs/12330-prekroceni-limitrequestbody-pri-nahravani-souboru