projects / oweals / luci.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 562c47e) | patch
luci-mod-admin-full: protect clock, flash and opkg ops with submit token
authorJo-Philipp Wich <jow@openwrt.org>
Tue, 20 Oct 2015 19:01:41 +0000 (21:01 +0200)
committerJo-Philipp Wich <jow@openwrt.org>
Tue, 20 Oct 2015 19:04:46 +0000 (21:04 +0200)
commitb5826f1ffb19288b8bfdc63f4b77700cfabe1181
tree2beb4afbfb4cd2719f81bd92d6e27cb4b75879f7tree | snapshot
parent562c47e5fd73bacc314f561592ad1b4ce8b8dc48commit | diff
luci-mod-admin-full: protect clock, flash and opkg ops with submit token

* Use post_on() target to require csrf token verification for modifying actions
* Ensure that package and flash operation handlers guard modifying operations
  with parameter check

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
modules/luci-mod-admin-full/luasrc/controller/admin/system.lua diff | blob | history
modules/luci-mod-admin-full/luasrc/view/admin_system/clock_status.htm diff | blob | history
modules/luci-mod-admin-full/luasrc/view/admin_system/flashops.htm diff | blob | history
modules/luci-mod-admin-full/luasrc/view/admin_system/packages.htm diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.