From c1278f967e90352506900d243888cd3ac9caee9f Mon Sep 17 00:00:00 2001 From: Jo-Philipp Wich Date: Wed, 21 Oct 2015 00:09:55 +0200 Subject: [PATCH] luci-app-splash: protect admin status call with csrf token Signed-off-by: Jo-Philipp Wich --- applications/luci-app-splash/luasrc/controller/splash/splash.lua | 2 +- applications/luci-app-splash/luasrc/view/admin_status/splash.htm | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/applications/luci-app-splash/luasrc/controller/splash/splash.lua b/applications/luci-app-splash/luasrc/controller/splash/splash.lua index 4add43559..13b8edce6 100644 --- a/applications/luci-app-splash/luasrc/controller/splash/splash.lua +++ b/applications/luci-app-splash/luasrc/controller/splash/splash.lua @@ -16,7 +16,7 @@ function index() node("splash", "splash").target = template("splash_splash/splash") node("splash", "blocked").target = template("splash/blocked") - entry({"admin", "status", "splash"}, call("action_status_admin"), _("Client-Splash")) + entry({"admin", "status", "splash"}, post("action_status_admin"), _("Client-Splash")) local page = node("splash", "publicstatus") page.target = call("action_status_public") diff --git a/applications/luci-app-splash/luasrc/view/admin_status/splash.htm b/applications/luci-app-splash/luasrc/view/admin_status/splash.htm index 23982d449..3415c205d 100644 --- a/applications/luci-app-splash/luasrc/view/admin_status/splash.htm +++ b/applications/luci-app-splash/luasrc/view/admin_status/splash.htm @@ -214,7 +214,7 @@ end
<%:Active Clients%>
- <% if is_admin then %>
<% end %> + <% if is_admin then %><% end %> -- 2.11.0