luci-base: fix CSRF prevention for arcombine targets
authorJo-Philipp Wich <jo@mein.io>
Wed, 9 Oct 2019 07:55:44 +0000 (09:55 +0200)
committerJo-Philipp Wich <jo@mein.io>
Wed, 9 Oct 2019 07:57:29 +0000 (09:57 +0200)
commitce63a036921c5e24e3644c365f0b25181ec7f7ff
tree5853a8ad82e1bb157bf59f17d1660e50d5c025fd
parentf59d069d1220fba733e0cb140ef4b0516c2b8624
luci-base: fix CSRF prevention for arcombine targets

The dispatcher failed to propagate the child target post security
requirements to the arcombine() dispatch target so far - fix this
by recursively testing the post security requirements.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit f8c6eb67cd9da09ee20248fec6ab742069635e47)
modules/luci-base/luasrc/dispatcher.lua