Benoit Esnard

CSRF on the destroy_entry endpoint

1

There is a [CSRF vulnerability](https://en.wikipedia.org/wiki/Cross-site_request_forgery) on the `destroy_entry` endpoint. This allows an attacker to trick their victims into deleting all their time entries.

Outdated info regarding multiple consecutive number signs

9

### Description The following code: ```php

The table of contents hadn't been updated to match the rest of the docs, leading to broken links and non-existent API endpoints being advertised.