From 1ee5ba632ab52b5d3af5c88803fee89c8eaf6fe1 Mon Sep 17 00:00:00 2001 From: Steven Barth Date: Mon, 15 Dec 2008 10:40:45 +0000 Subject: Refined urltokens and XSRF protection --- modules/admin-mini/luasrc/controller/mini/index.lua | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'modules/admin-mini') diff --git a/modules/admin-mini/luasrc/controller/mini/index.lua b/modules/admin-mini/luasrc/controller/mini/index.lua index dad6ccfab..acff55aab 100644 --- a/modules/admin-mini/luasrc/controller/mini/index.lua +++ b/modules/admin-mini/luasrc/controller/mini/index.lua @@ -44,8 +44,9 @@ function action_logout() local sauth = require "luci.sauth" if dsp.context.authsession then sauth.kill(dsp.context.authsession) + dsp.context.urltoken.stok = nil end - luci.http.header("Set-Cookie", "sysauth=; path=/") + luci.http.header("Set-Cookie", "sysauth=; path=" .. dsp.build_url()) luci.http.redirect(luci.dispatcher.build_url()) end \ No newline at end of file -- cgit v1.2.3