ClearFoundation Tracker - ClearOS
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0001066ClearOSclearos-frameworkpublic2013-03-26 20:492013-04-01 11:10
Reporteruser2 
Assigned To 
PrioritynormalSeverityminorReproducibilityN/A
StatusclosedResolutionfixed 
PlatformOSOS Version
Product Version 
Target Version6.4.0Fixed in Version 
Summary0001066: Added CSRF temporary bypass for remote API calls
DescriptionSome URLs are designed for remote API calls, so CSRF protection needs to be bypassed. Add a temporary workaround as described here: https://github.com/EllisLab/CodeIgniter/pull/236 [^]
Steps To Reproduce
Additional Information
TagsNo tags attached.
Relationships
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2013-03-26 20:49user2New Issue
2013-03-26 20:50user2Statusnew => confirmed
2013-03-27 10:58user2Checkin
2013-03-27 10:58user2Note Added: 0000777
2013-03-27 10:58user2Statusconfirmed => resolved
2013-03-27 10:58user2Resolutionopen => fixed
2013-04-01 11:10user2Statusresolved => closed

Notes
(0000777)
user2   
2013-03-27 10:58   
Source Code Changelog
---------------------------------------------------
- Added CSRF exception list for remote API callers [fixed tracker 0001066]

File Changes
---------------------------------------------------
Details: http://code.clearfoundation.com/svn/revision.php?repname=ClearOS&rev=5844 [^]
U webconfig/framework/trunk/packaging/clearos-framework.spec
U webconfig/framework/trunk/system/core/Security.php