removed unwarranted relaxation of CSRF check

This commit is contained in:
benson
2022-12-22 23:36:23 +08:00
parent d88e100981
commit 892542b857
5 changed files with 3 additions and 19 deletions

View File

@@ -38,11 +38,10 @@ class Aria2Controller extends Controller
$this->aria2->init(); $this->aria2->init();
$this->dbconn = new DbHelper(); $this->dbconn = new DbHelper();
$this->counters = new Counters($aria2, $this->dbconn, $UserId); $this->counters = new Counters($aria2, $this->dbconn, $UserId);
} }
/** /**
* @NoAdminRequired * @NoAdminRequired
* @NoCSRFRequired
*/ */
public function Action($path) public function Action($path)
{ {
@@ -130,7 +129,6 @@ class Aria2Controller extends Controller
} }
/** /**
* @NoAdminRequired * @NoAdminRequired
* @NoCSRFRequired
*/ */
public function getStatus($path) public function getStatus($path)
{ {

View File

@@ -55,8 +55,10 @@ class MainController extends Controller
//$config = \OC::$server->getAppConfig(); //$config = \OC::$server->getAppConfig();
OC_Util::addScript($this->appName, 'app'); OC_Util::addScript($this->appName, 'app');
OC_Util::addStyle($this->appName, 'app'); OC_Util::addStyle($this->appName, 'app');
$params = $this->buildParams(); $params = $this->buildParams();
$response = new TemplateResponse($this->appName, 'Index', $params); $response = new TemplateResponse($this->appName, 'Index', $params);
return $response; return $response;
} }
@@ -123,7 +125,6 @@ class MainController extends Controller
} }
/** /**
* @NoAdminRequired * @NoAdminRequired
* @NoCSRFRequired
*/ */
public function Download() public function Download()
{ {
@@ -168,7 +169,6 @@ class MainController extends Controller
} }
/** /**
* @NoAdminRequired * @NoAdminRequired
* @NoCSRFRequired
*/ */
public function Upload() public function Upload()
{ {
@@ -201,7 +201,6 @@ class MainController extends Controller
/** /**
* @NoAdminRequired * @NoAdminRequired
* @NoCSRFRequired
*/ */
public function scanFolder() public function scanFolder()
{ {
@@ -211,7 +210,6 @@ class MainController extends Controller
} }
/** /**
* @NoAdminRequired * @NoAdminRequired
* @NoCSRFRequired
*/ */
public function getCounters(): JSONResponse public function getCounters(): JSONResponse
{ {

View File

@@ -24,7 +24,6 @@ class SearchController extends Controller
} }
/** /**
* @NoAdminRequired * @NoAdminRequired
* @NoCSRFRequired
*/ */
public function execute() public function execute()
{ {

View File

@@ -27,7 +27,6 @@ class SettingsController extends Controller
/** /**
* @NoAdminRequired * @NoAdminRequired
* @NoCSRFRequired
*/ */
public function getSettings() public function getSettings()
{ {
@@ -39,7 +38,6 @@ class SettingsController extends Controller
/** /**
* @NoAdminRequired * @NoAdminRequired
* @NoCSRFRequired
*/ */
public function saveCustom() public function saveCustom()
{ {
@@ -52,7 +50,6 @@ class SettingsController extends Controller
/** /**
* @NoAdminRequired * @NoAdminRequired
* @NoCSRFRequired
*/ */
public function getCustomAria2() public function getCustomAria2()
{ {
@@ -86,7 +83,6 @@ class SettingsController extends Controller
} }
/** /**
* *
* @NoCSRFRequired
*/ */
public function getGlobalAria2() public function getGlobalAria2()
{ {
@@ -94,7 +90,6 @@ class SettingsController extends Controller
} }
/** /**
* @NoAdminRequired * @NoAdminRequired
* @NoCSRFRequired
*/ */
public function saveCustomAria2() public function saveCustomAria2()
{ {
@@ -110,7 +105,6 @@ class SettingsController extends Controller
} }
/** /**
* @NoAdminRequired * @NoAdminRequired
* @NoCSRFRequired
*/ */
public function deleteCustomAria2() public function deleteCustomAria2()
{ {
@@ -126,7 +120,6 @@ class SettingsController extends Controller
/** /**
* @NoAdminRequired * @NoAdminRequired
* @NoCSRFRequired
*/ */
public function getYtdl() public function getYtdl()
{ {
@@ -145,7 +138,6 @@ class SettingsController extends Controller
} }
/** /**
* @NoAdminRequired * @NoAdminRequired
* @NoCSRFRequired
*/ */
public function deleteYtdl() public function deleteYtdl()
{ {

View File

@@ -70,7 +70,6 @@ class YtdlController extends Controller
} }
/** /**
* @NoAdminRequired * @NoAdminRequired
* @NoCSRFRequired
*/ */
public function Download() public function Download()
{ {
@@ -108,7 +107,6 @@ class YtdlController extends Controller
} }
/** /**
* @NoAdminRequired * @NoAdminRequired
* @NoCSRFRequired
*/ */
public function Delete() public function Delete()
{ {
@@ -144,7 +142,6 @@ class YtdlController extends Controller
} }
/** /**
* @NoAdminRequired * @NoAdminRequired
* @NoCSRFRequired
*/ */
public function Redownload() public function Redownload()
{ {