From cde237b68763c542da20038e5f62bea341ae1d37 Mon Sep 17 00:00:00 2001 From: luccioman Date: Sun, 26 Mar 2017 11:48:00 +0200 Subject: Enforced access controls on some administrative actions. - ensure use of HTTP POST method : HTTP GET should only be used for information retrieval and not to perform server side effect operations (see HTTP standard https://tools.ietf.org/html/rfc7231#section-4.2.1) - a transaction token is now required for these administrative form submissions to ensure the request can not be included in an external site and performed silently/by mistake by the user browser --- htroot/ConfigUpdate_p.html | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) (limited to 'htroot/ConfigUpdate_p.html') diff --git a/htroot/ConfigUpdate_p.html b/htroot/ConfigUpdate_p.html index 2be2f3ee6..e5228281f 100644 --- a/htroot/ConfigUpdate_p.html +++ b/htroot/ConfigUpdate_p.html @@ -1,7 +1,6 @@ - - + + - #(forwardToSteering)#::#(/forwardToSteering)# YaCy '#[clientname]#': System Update #%env/templates/metas.template%# @@ -35,10 +34,11 @@ #(/downloadError)#


Downloaded Releases
-

+

#(downloadsAvailable)# No downloaded releases available for deployment. :: +  #(/downloadsAvailable)# #(deployenabled)#::no automated installation on development environments:: +    -    +    #(/deployenabled)#


Automatic Update
-- cgit v1.2.3