summaryrefslogtreecommitdiffhomepage
path: root/applications/luci-app-radicale/luasrc/view
diff options
context:
space:
mode:
authorJo-Philipp Wich <jow@openwrt.org>2015-10-21 00:03:56 +0200
committerJo-Philipp Wich <jow@openwrt.org>2015-10-21 00:03:56 +0200
commitac34dfa0bc65e2efeb9575d3cd42c4696d31bb1b (patch)
tree0a98a525ad60c18cbdc77f4e5f1293c278c33364 /applications/luci-app-radicale/luasrc/view
parentae9fb03e74d54c5e11d6925e3ddc1bb5991cd733 (diff)
luci-app-radicale: protect start/stop actions with csrf token
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
Diffstat (limited to 'applications/luci-app-radicale/luasrc/view')
-rw-r--r--applications/luci-app-radicale/luasrc/view/radicale/btn_startstop.htm2
1 files changed, 1 insertions, 1 deletions
diff --git a/applications/luci-app-radicale/luasrc/view/radicale/btn_startstop.htm b/applications/luci-app-radicale/luasrc/view/radicale/btn_startstop.htm
index b34627536d..dbf4dddbca 100644
--- a/applications/luci-app-radicale/luasrc/view/radicale/btn_startstop.htm
+++ b/applications/luci-app-radicale/luasrc/view/radicale/btn_startstop.htm
@@ -21,7 +21,7 @@
function onclick_startstop(id) {
// do start/stop
var btnXHR = new XHR();
- btnXHR.get('<%=url('admin/services/radicale/startstop')%>', null,
+ btnXHR.post('<%=url('admin/services/radicale/startstop')%>', { token: '<%=token%>' },
function(x) { _data2elements(x); }
);
}