From f9cffdcf20da9c1751a39d02c9e287b63f659c12 Mon Sep 17 00:00:00 2001
From: velz <velmurugan.s@venbainfotech.com>
Date: Mon, 9 Feb 2026 14:21:09 +0530
Subject: [PATCH] FIX_SECURITY_1

---
 app/Config/Filters.php      | 2 +-
 app/Filters/Cors.php        | 2 +-
 app/Views/layout/header.php | 6 ++++--
 3 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/app/Config/Filters.php b/app/Config/Filters.php
index b115e0ca..279d54da 100755
--- a/app/Config/Filters.php
+++ b/app/Config/Filters.php
@@ -62,7 +62,7 @@ class Filters extends BaseConfig
         'before' => [
             'HttpRequestLog' => ['except' => 'cli/*'],
             'Cors',
-            // 'AclFilter' => ['except' => ['login', 'logout', 'auth/*', 'oauth2callback','claim-form-download', 'claims-feedback-form', 'autobookstackLogin','employeeRest/*','processjob','getCommission']],
+            'AclFilter' => ['except' => ['login', 'logout', 'auth/*', 'oauth2callback','claim-form-download', 'claims-feedback-form', 'autobookstackLogin','employeeRest/*','processjob','getCommission']],
             'SecurityInputFilter' => ['except' => ['/client/notification/create','/ticket/crud_mail_template/*','test_mail','leads/sendMail'] ],
             'GlobalPostFileUploadGuard'
             // 'csrf',
diff --git a/app/Filters/Cors.php b/app/Filters/Cors.php
index 3cfd1252..60a97a89 100644
--- a/app/Filters/Cors.php
+++ b/app/Filters/Cors.php
@@ -38,7 +38,7 @@ class Cors implements FilterInterface
      * 
      * @var string
      */
-    protected string $allowedMethods = 'GET,POST,PUT,PATCH,DELETE,OPTIONS';
+    protected string $allowedMethods = 'GET,POST,OPTIONS';
 
     /**
      * HTTP headers allowed in CORS requests
diff --git a/app/Views/layout/header.php b/app/Views/layout/header.php
index 73c56916..57ac949b 100755
--- a/app/Views/layout/header.php
+++ b/app/Views/layout/header.php
@@ -51,7 +51,8 @@
 
 
     <!-- JQuery CDN -->
-    <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
+    <script src="https://code.jquery.com/jquery-3.7.1.min.js"></script>
+
 
     <!-- Sweet Alert CDN -->
     <script src="https://cdn.jsdelivr.net/npm/sweetalert2@11.10.4/dist/sweetalert2.all.min.js"></script>
@@ -59,7 +60,8 @@
     <!-- select2 -->
     <link href="https://cdn.jsdelivr.net/npm/select2@4.1.0-beta.1/dist/css/select2.min.css" rel="stylesheet" type="text/css">
 
-    <script src="https://code.jquery.com/jquery-3.5.1.slim.min.js"></script>
+    <script src="https://code.jquery.com/jquery-3.7.1.slim.min.js"></script>
+
     <script src="https://cdn.jsdelivr.net/npm/@popperjs/core@2.5.3/dist/umd/popper.min.js"></script>
 
     <!-- <link rel="manifest" href="../manifest.json"> -->