Mercurial > kallithea
comparison docs/usage/statistics.rst @ 5811:9b74296e6af6 stable
auth: further sanitize requests to prevent GET CSRF (CVE-2016-3691)
Routes allows GET requests to override the HTTP method, which breaks
the Kallithea CSRF protection (which only applies to POST requests).
This commit blocks such GET request, preventing CSRF attacks.
| author | Søren Løvborg <sorenl@unity3d.com> |
|---|---|
| date | Tue, 19 Apr 2016 18:02:56 +0200 |
| parents | 5ae8e644aa88 |
| children |
comparison
equal
deleted
inserted
replaced
| 5810:81057be7a5c1 | 5811:9b74296e6af6 |
|---|