yacy/bin/protectedPostApiCall.sh, branch master YaCy search server with some extra patches https://git.fennell.dev/yacy/atom?h=master 2018-11-27T10:36:40Z Also check yacy.conf file existence in shell scripts where relevant 2018-11-27T10:36:40Z luccioman luccioman@users.noreply.github.com 2018-11-27T10:36:40Z urn:sha1:106bfd0e5f7cc9cabf32a5c2110db44e9200bdd3 Added support for custom DATA path in shell scripts 2018-11-26T17:26:52Z luccioman luccioman@users.noreply.github.com 2018-11-26T17:26:52Z urn:sha1:17ad1f7e65475f6f5de96f69e74c938fac699768 When the YACY_DATA_PATH environment variable is set, shell scripts will now use the given path instead of relative ../DATA which remains the default when the variable is not set. Necessary in the context of Snap package (see issue #254) as YaCy is started with startYACY.sh and an absolute DATA parent path in parameter. Enforced access controls on some administrative actions. 2017-03-26T09:48:00Z luccioman luccioman@users.noreply.github.com 2017-03-26T09:48:00Z urn:sha1:cde237b68763c542da20038e5f62bea341ae1d37 - ensure use of HTTP POST method : HTTP GET should only be used for information retrieval and not to perform server side effect operations (see HTTP standard https://tools.ietf.org/html/rfc7231#section-4.2.1) - a transaction token is now required for these administrative form submissions to ensure the request can not be included in an external site and performed silently/by mistake by the user browser