openwrt-mirror/luci
1
0
Fork 0
mirror of https://github.com/openwrt/luci.git synced 2026-08-29 08:31:46 +04:00
Code Issues Packages Projects Releases Wiki Activity

luci-app-ocserv: protect disconnect action with csrf token

Browse Source 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
This commit is contained in:
Jo-Philipp Wich
2015-10-21 00:00:55 +02:00
parent b9ed03c5a9
commit 0f1f5140e3
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
applications/luci-app-ocserv/luasrc/controller/ocserv.lua
+1 -1
View File
@@ -28,7 +28,7 @@ function index()
call("ocserv_status")).leaf = true
entry({"admin", "services", "ocserv", "disconnect"},
call("ocserv_disconnect")).leaf = true
post("ocserv_disconnect")).leaf = true
end
applications/luci-app-ocserv/luasrc/view/ocserv_status.htm
+1 -1
View File
@@ -1,7 +1,7 @@
<script type="text/javascript">//<![CDATA[
function ocserv_disconnect(idx) {
XHR.get('<%=url('admin/services/ocserv/disconnect')%>/' + idx, null,
(new XHR()).post('<%=url('admin/services/ocserv/disconnect')%>/' + idx, { token: '<%=token%>' },
function(x)
{
var tb = document.getElementById('ocserv_status_table');