Jo-Philipp Wich 186e690c08 luci-base: dispatcher: reject non-POST requests with any cbi.submit value ...

Due to the fact that luci.model.cbi reacts on any "cbi.submit" value while
the dispatcher only required POST for cbi.submit == 1, the CSRF token
protection could be bypassed.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

2018-04-05 00:15:22 +02:00

..

luci-base

luci-base: dispatcher: reject non-POST requests with any cbi.submit value

2018-04-05 00:15:22 +02:00

luci-mod-admin-full

luci-mod-admin-full: use strict hostname validation for dhcp hosts

2018-04-04 23:21:53 +02:00

luci-mod-admin-mini

treewide: unify mac address handling

2018-03-12 16:12:18 +01:00

luci-mod-failsafe

luci-mod-failsafe: use same string as luci-mod-admin-full

2016-12-10 19:11:50 +02:00

luci-mod-freifunk

i18n-ru: fixed and updated russian translation

2018-01-30 17:35:30 +03:00

luci-mod-freifunk-community

Rework LuCI build system

2015-01-08 16:26:20 +01:00

luci-mod-rpc

luci-mod-rpc: add license tag

2017-06-13 13:40:23 +02:00