diff options
| author | luccioman <luccioman@users.noreply.github.com> | 2017-04-03 12:20:16 +0200 |
|---|---|---|
| committer | luccioman <luccioman@users.noreply.github.com> | 2017-04-03 12:20:16 +0200 |
| commit | 665d087d768bd5ae182e2e114403ad0bfe295ec2 (patch) | |
| tree | 1f45075ea29a473b7590eb5fb6f9e4b524312b85 /htroot/ConfigPortal_p.html | |
| parent | 0feded21dd32a65fc4f3a19d0b2db3382499d85f (diff) | |
Enforced access controls on a few more administration pages.
- ensure use of HTTP POST method when performing server side effect
operations
- transaction token required to ensure the request has effectively been
requested by user interaction
Diffstat (limited to 'htroot/ConfigPortal_p.html')
| -rw-r--r-- | htroot/ConfigPortal_p.html | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/htroot/ConfigPortal_p.html b/htroot/ConfigPortal_p.html index 205ed4a3e..d0de8afaf 100644 --- a/htroot/ConfigPortal_p.html +++ b/htroot/ConfigPortal_p.html @@ -16,6 +16,7 @@ To change also colours and styles use the <a href="ConfigAppearance_p.html">Appearance Servlet</a> for different skins and languages. </p> <form action="ConfigPortal_p.html" method="post" enctype="multipart/form-data" id="ConfigPortal" accept-charset="UTF-8"> + <input type="hidden" name="transactionToken" value="#[transactionToken]#"/> <fieldset> <dl> <dt>Greeting Line</dt> |