openwrt-mirror/luci
1
0
Fork 0
mirror of https://github.com/openwrt/luci.git synced 2026-08-29 06:22:49 +04:00
Code Issues Packages Projects Releases Wiki Activity

luci-app-privoxy: protect start/stop actions with csrf token

Browse Source 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
This commit is contained in:
Jo-Philipp Wich
2015-10-21 00:03:03 +02:00
parent 0f1f5140e3
commit ae9fb03e74
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
applications/luci-app-privoxy/luasrc/controller/privoxy.lua
+1 -1
View File
@@ -15,7 +15,7 @@ PRIVOXY_MIN = "3.0.22-0" -- minimum version of service required
function index()
entry( {"admin", "services", "privoxy"}, cbi("privoxy"), _("Privoxy WEB proxy"), 59)
entry( {"admin", "services", "privoxy", "logview"}, call("logread") ).leaf = true
entry( {"admin", "services", "privoxy", "startstop"}, call("startstop") ).leaf = true
entry( {"admin", "services", "privoxy", "startstop"}, post("startstop") ).leaf = true
entry( {"admin", "services", "privoxy", "status"}, call("get_pid") ).leaf = true
end
applications/luci-app-privoxy/luasrc/view/privoxy/detail_startstop.htm
+1 -1
View File
@@ -21,7 +21,7 @@
function onclick_startstop(id) {
// do start/stop
var btnXHR = new XHR();
btnXHR.get('<%=url('admin/services/privoxy/startstop')%>', null,
btnXHR.post('<%=url('admin/services/privoxy/startstop')%>', { token: '<%=token%>' },
function(x) { _data2elements(x); }
);
}