Jason Varga

It may be possible that we could add a `pre-package-uninstall` to `statamic/statamic`'s composer file which could call something in the addon before it gets uninstalled. I'm not sure though. Definitely...

~Done in statamic/cms#11057~

The csrf token is only for that user. Its attached to their session. If you hit that route to get a new csrf token, it would be yours and attached...

Unless you explicitly allow it, CORS will prevent cross-site requests to these routes. (I was attacking from statamic.com.test, which is different from statamic.test - sorry, I should have picked more...

This has been this way for a long time. This PR isn't really introducing anything new. If you want to consider this a security issue please send it appropriately and...

Hi @DanielRuf I have created a repo with a test matrix that includes ubuntu and mac os. https://github.com/jasonvarga/msphpsql-issue Here's the workflow that shows the behavior: https://github.com/jasonvarga/msphpsql-issue/actions/runs/16836141618 There is a PHPUnit...

Considering this a feature request. When you use the dynamic folder feature, you're restricted to that folder.

Oh yeah there's code in there to intentionally not fire the event. Bah.

In it's current state, I don't think it'll get merged. But I'm leaving this open temporarily as a reminder to think about a permanent solution.

> Until then, we will work with an applied patch after every Statamic update 😬 You can use a [composer patch](https://rias.be/blog/using-composer-patches) to automate it.