luci-app-upnp: protect lease delete call with csrf token

[project/luci.git] / applications / luci-app-upnp / luasrc / controller / upnp.lua

diff --git a/applications/luci-app-upnp/luasrc/controller/upnp.lua b/applications/luci-app-upnp/luasrc/controller/upnp.lua
index 790bf29..a0e2fd5 100644 (file)
--- a/applications/luci-app-upnp/luasrc/controller/upnp.lua
+++ b/applications/luci-app-upnp/luasrc/controller/upnp.lua
@@ -15,7 +15,7 @@ function index()
        page.dependent = true
 
        entry({"admin", "services", "upnp", "status"}, call("act_status")).leaf = true
-       entry({"admin", "services", "upnp", "delete"}, call("act_delete")).leaf = true
+       entry({"admin", "services", "upnp", "delete"}, post("act_delete")).leaf = true
 end
 
 function act_status()