diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2011-10-20 11:29:26 -0400 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2011-12-12 17:36:45 -0500 |
| commit | 2d6eeb205e196cc6556f832555e74968619c0f1e (patch) | |
| tree | 181ae3111506bd2f6dc9eda172f262b14e613e00 /install/ui/facet.js | |
| parent | da4b4fc4d9ef42f8ca46d5b5f405b93ba84f07d0 (diff) | |
| download | freeipa.git-2d6eeb205e196cc6556f832555e74968619c0f1e.tar.gz freeipa.git-2d6eeb205e196cc6556f832555e74968619c0f1e.tar.xz freeipa.git-2d6eeb205e196cc6556f832555e74968619c0f1e.zip | |
Require an HTTP Referer header in the server. Send one in ipa tools.
This is to prevent a Cross-Site Request Forgery (CSRF) attack where
a rogue server tricks a user who was logged into the FreeIPA
management interface into visiting a specially-crafted URL where
the attacker could perform FreeIPA oonfiguration changes with the
privileges of the logged-in user.
https://bugzilla.redhat.com/show_bug.cgi?id=747710
Diffstat (limited to 'install/ui/facet.js')
0 files changed, 0 insertions, 0 deletions