OpenWRT
/
luci
mirror of https://github.com/openwrt/luci.git
1
0
Fork 0
Code Issues Releases Wiki Activity

luci-app-radicale: protect start/stop actions with csrf token 

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
pull/494/head
Jo-Philipp Wich 2015-10-21 00:03:56 +02:00
parent ae9fb03e74
commit ac34dfa0bc
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
applications/luci-app-radicale/luasrc/controller/radicale.lua
View File

@ -15,7 +15,7 @@ function index()
entry( {"admin", "services", "radicale"}, alias("admin", "services", "radicale", "edit"), _("CalDAV/CardDAV"), 58)
entry( {"admin", "services", "radicale", "edit"}, cbi("radicale") ).leaf = true
entry( {"admin", "services", "radicale", "logview"}, call("_logread") ).leaf = true
entry( {"admin", "services", "radicale", "startstop"}, call("_startstop") ).leaf = true
entry( {"admin", "services", "radicale", "startstop"}, post("_startstop") ).leaf = true
entry( {"admin", "services", "radicale", "status"}, call("_status") ).leaf = true
end

2
applications/luci-app-radicale/luasrc/view/radicale/btn_startstop.htm
View File

@ -21,7 +21,7 @@
function onclick_startstop(id) {
// do start/stop
var btnXHR = new XHR();
btnXHR.get('<%=url('admin/services/radicale/startstop')%>', null,
btnXHR.post('<%=url('admin/services/radicale/startstop')%>', { token: '<%=token%>' },
function(x) { _data2elements(x); }
);
}