Security: Missing CSRF check on migration action #105

New Issue

2026-05-29T05:30:35Z

jmiller commented

2026-05-29 05:30:35 +00:00

Audit Finding L-5

Severity: Low

Issue:
DashboardController::migrate() performs write operations but has no $this->checkToken(). CSRF attack by logged-in super admin could trigger migration.

Fix: Add $this->checkToken() call.

Files: DashboardController.php

Label: priority: low, type: security

## Audit Finding L-5 **Severity:** Low **Issue:** `DashboardController::migrate()` performs write operations but has no `$this->checkToken()`. CSRF attack by logged-in super admin could trigger migration. **Fix:** Add `$this->checkToken()` call. **Files:** `DashboardController.php` **Label:** `priority: low`, `type: security`

jmiller commented

2026-05-29 05:30:37 +00:00

Branch created: feature/105-security-missing-csrf-check-on-migration

git fetch origin
git checkout feature/105-security-missing-csrf-check-on-migration

Branch created: [`feature/105-security-missing-csrf-check-on-migration`](https://git.mokoconsulting.tech/MokoConsulting/MokoJoomCross/src/branch/feature/105-security-missing-csrf-check-on-migration) ```bash git fetch origin git checkout feature/105-security-missing-csrf-check-on-migration ```

Sign in to join this conversation.

Type Security

Status —

Priority High

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: MokoConsulting/MokoJoomCross#105