Fixed: POST method enforcement on REST dispatch endpoint #89

New Issue

2026-05-29T05:30:26Z

jmiller commented

2026-05-29 05:30:26 +00:00

Fixed in commit `8dd6fdd`

Severity: Critical

What was wrong:
DispatchController accepted any HTTP method. A GET request could trigger cross-posting.

Fix applied:
Added POST method check at the top of dispatch(), returns 405 for non-POST requests.

Files: DispatchController.php

Label: priority: critical, status: pending-testing

## Fixed in commit 8dd6fdd **Severity:** Critical **What was wrong:** DispatchController accepted any HTTP method. A GET request could trigger cross-posting. **Fix applied:** Added POST method check at the top of `dispatch()`, returns 405 for non-POST requests. **Files:** `DispatchController.php` **Label:** `priority: critical`, `status: pending-testing`

jmiller commented

2026-05-29 05:30:28 +00:00

Branch created: feature/89-fixed-post-method-enforcement-on-rest-di

git fetch origin
git checkout feature/89-fixed-post-method-enforcement-on-rest-di

Branch created: [`feature/89-fixed-post-method-enforcement-on-rest-di`](https://git.mokoconsulting.tech/MokoConsulting/MokoJoomCross/src/branch/feature/89-fixed-post-method-enforcement-on-rest-di) ```bash git fetch origin git checkout feature/89-fixed-post-method-enforcement-on-rest-di ```

jmiller closed this issue

2026-06-05 05:10:50 +00:00

Sign in to join this conversation.

Type Bug

Status —

Priority Critical

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: MokoConsulting/MokoJoomCross#89