summaryrefslogtreecommitdiffhomepage
path: root/applications/luci-app-privoxy/luasrc/view
diff options
context:
space:
mode:
authorJo-Philipp Wich <jow@openwrt.org>2015-10-21 00:03:03 +0200
committerJo-Philipp Wich <jow@openwrt.org>2015-10-21 00:03:03 +0200
commitae9fb03e74d54c5e11d6925e3ddc1bb5991cd733 (patch)
treebe6815b4a78faf06cf2afb8a2b069aa5d2e6d712 /applications/luci-app-privoxy/luasrc/view
parent0f1f5140e36eff6d22de038f09f1d16b03e300e8 (diff)
luci-app-privoxy: protect start/stop actions with csrf token
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
Diffstat (limited to 'applications/luci-app-privoxy/luasrc/view')
-rw-r--r--applications/luci-app-privoxy/luasrc/view/privoxy/detail_startstop.htm2
1 files changed, 1 insertions, 1 deletions
diff --git a/applications/luci-app-privoxy/luasrc/view/privoxy/detail_startstop.htm b/applications/luci-app-privoxy/luasrc/view/privoxy/detail_startstop.htm
index 8c97daeee2..85975ac7d1 100644
--- a/applications/luci-app-privoxy/luasrc/view/privoxy/detail_startstop.htm
+++ b/applications/luci-app-privoxy/luasrc/view/privoxy/detail_startstop.htm
@@ -21,7 +21,7 @@
function onclick_startstop(id) {
// do start/stop
var btnXHR = new XHR();
- btnXHR.get('<%=url('admin/services/privoxy/startstop')%>', null,
+ btnXHR.post('<%=url('admin/services/privoxy/startstop')%>', { token: '<%=token%>' },
function(x) { _data2elements(x); }
);
}