projects / project / luci.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 281d2f6) | patch
luci-base: prevent UCI changes in CBI if form is not in submit state
authorJo-Philipp Wich <jow@openwrt.org>
Wed, 7 Oct 2015 19:44:46 +0000 (21:44 +0200)
committerJo-Philipp Wich <jow@openwrt.org>
Wed, 7 Oct 2015 22:30:14 +0000 (00:30 +0200)
commitbd504f552d9741cdb68086bd96161791d1a72734
tree3088bb8adb86fb062487475551ab48b59b29a160tree | snapshot
parent281d2f617899a0c3a171a66c6a3a14e834aa000ccommit | diff
luci-base: prevent UCI changes in CBI if form is not in submit state

Only process submitted data if the "cbi.submit" parameter is present as the
dispatcher will verify the integrity of the CSRF token in this case.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
modules/luci-base/luasrc/cbi.lua diff | blob | history
Lua Configuration Interface (mirror)