mirror of
https://github.com/znc/znc.git
synced 2026-05-01 02:52:30 +02:00
Webmods: Only accept POST requests with a secret parameter
This is a first step against CSRF. Thanks to flakes for the idea. git-svn-id: https://znc.svn.sourceforge.net/svnroot/znc/trunk@1932 726aef4b-f618-498e-8847-2d620e286838
This commit is contained in:
@@ -147,6 +147,7 @@ public:
|
||||
void PrintErrorPage(const CString& sMessage);
|
||||
|
||||
CSmartPtr<CWebSession> GetSession();
|
||||
CString GetCSRFCheck();
|
||||
|
||||
virtual Csock* GetSockObj(const CString& sHost, unsigned short uPort);
|
||||
CString GetModWebPath(const CString& sModName) const;
|
||||
|
||||
Reference in New Issue
Block a user