summaryrefslogtreecommitdiff
path: root/bin/protectedPostApiCall.sh
AgeCommit message (Collapse)Author
2018-11-27Also check yacy.conf file existence in shell scripts where relevantluccioman
2018-11-26Added support for custom DATA path in shell scriptsluccioman
When the YACY_DATA_PATH environment variable is set, shell scripts will now use the given path instead of relative ../DATA which remains the default when the variable is not set. Necessary in the context of Snap package (see issue #254) as YaCy is started with startYACY.sh and an absolute DATA parent path in parameter.
2017-03-26Enforced access controls on some administrative actions.luccioman
- ensure use of HTTP POST method : HTTP GET should only be used for information retrieval and not to perform server side effect operations (see HTTP standard https://tools.ietf.org/html/rfc7231#section-4.2.1) - a transaction token is now required for these administrative form submissions to ensure the request can not be included in an external site and performed silently/by mistake by the user browser