diff options
| author | luccioman <luccioman@users.noreply.github.com> | 2018-04-18 08:10:51 +0200 |
|---|---|---|
| committer | luccioman <luccioman@users.noreply.github.com> | 2018-04-18 08:10:51 +0200 |
| commit | 8bc36506f238f18a57969336a1c66d3b56ce91c9 (patch) | |
| tree | 808614f1e6cde046461fbf4b638670eca2b4b3ae /htroot/ConfigNetwork_p.html | |
| parent | 02673379df88bdf476b41ab0c5bda99dc3b2fbce (diff) | |
Enforced access controls on basic administration settings pages.
Ensuring http post method is used for operations with server-side
effects (in respect of http semantics), and a valid transaction token is
provided by the user-agent.
Diffstat (limited to 'htroot/ConfigNetwork_p.html')
| -rw-r--r-- | htroot/ConfigNetwork_p.html | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/htroot/ConfigNetwork_p.html b/htroot/ConfigNetwork_p.html index 3870d28d0..d55ed6928 100644 --- a/htroot/ConfigNetwork_p.html +++ b/htroot/ConfigNetwork_p.html @@ -49,6 +49,7 @@ #(commitDHTNoGlobalSearch)#::<div class="error">Global Search in P2P configuration is only allowed, if index receive is switched on. You have a P2P configuration, but are not allowed to search other peers.</div>#(/commitDHTNoGlobalSearch)# #(commitRobinson)#::<div class="commit">For Robinson Mode, index distribution and receive is switched off.</div>#(/commitRobinson)# <form id="NetworkForm" method="post" action="ConfigNetwork_p.html" enctype="multipart/form-data" accept-charset="UTF-8"> + <input type="hidden" name="transactionToken" value="#[transactionToken]#"/> <fieldset> <legend> <label>Network and Domain Specification</label> @@ -101,6 +102,7 @@ without any data exchange between your peer and other peers. </p> <form id="ConfigForm" method="post" action="ConfigNetwork_p.html" enctype="multipart/form-data" accept-charset="UTF-8"> + <input type="hidden" name="transactionToken" value="#[transactionToken]#"/> <fieldset> <legend> <input type="radio" name="network" id="p2p" onclick="EnableP2P()" value="p2p"#(p2p.checked)#:: checked="checked"#(/p2p.checked)# /> |