yacy_search_server

Commit Graph

Author	SHA1	Message	Date
Michael Peter Christen	01cc32217f	fixed apicall call method parameters and verification in transaction manager which did not have and exception for localhost/basic authentication	4 years ago
luccioman	e914d17aca	Updated call to function deprecated since commons-codec version 1.11	7 years ago
luccioman	cde237b687	Enforced access controls on some administrative actions. - ensure use of HTTP POST method : HTTP GET should only be used for information retrieval and not to perform server side effect operations (see HTTP standard https://tools.ietf.org/html/rfc7231#section-4.2.1) - a transaction token is now required for these administrative form submissions to ensure the request can not be included in an external site and performed silently/by mistake by the user browser	8 years ago

Author

SHA1

Message

Date

Michael Peter Christen

01cc32217f

fixed apicall call method parameters

and verification in transaction manager
which did not have and exception for localhost/basic authentication

luccioman

e914d17aca

Updated call to function deprecated since commons-codec version 1.11

luccioman

cde237b687

Enforced access controls on some administrative actions.

- ensure use of HTTP POST method : HTTP GET should only be used for
information retrieval and not to perform server side effect operations
(see HTTP standard https://tools.ietf.org/html/rfc7231#section-4.2.1)
 - a transaction token is now required for these administrative form
submissions to ensure the request can not be included in an external
site and performed silently/by mistake by the user browser

3 Commits (5a7f12a9c17594d45997fc7dbfecb87ceb968185)