mirror/webgui
1
0
Fork 0
mirror of https://github.com/unraid/webgui.git synced 2026-03-11 05:20:44 -05:00
Code Issues Packages Projects Releases Wiki Activity

Explicitly add csrf_token in device assignment forms.

Browse Source
This commit is contained in:
Tom Mortensen
2017-07-17 13:48:10 -07:00
parent d14ccc71fc
commit 1cfa9db298
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
plugins/dynamix/include/DeviceList.php
View File

@@ -77,6 +77,7 @@ function assignment(&$disk) {
global $var, $devs;
$out = "<form method='POST' name=\"{$disk['name']}Form\" action='/update.htm' target='progressFrame'>";
$out .= "<input type='hidden' name='changeDevice' value='apply'>";
$out .= "<input type='hidden' name='csrf_token' value='{$var['csrf_token']}'>";
$out .= "<select class=\"slot\" name=\"slotId.{$disk['idx']}\" onChange=\"{$disk['name']}Form.submit()\">";
$empty = ($disk['idSb']!='' ? 'no device' : 'unassigned');
if ($disk['id']!='') {