Skip to content

Only allow GET HEAD OPTIONS#751

Open
MuxZeroNet wants to merge 1 commit into
HelloZeroNet:masterfrom
MuxZeroNet:patch-5
Open

Only allow GET HEAD OPTIONS#751
MuxZeroNet wants to merge 1 commit into
HelloZeroNet:masterfrom
MuxZeroNet:patch-5

Conversation

@MuxZeroNet
Copy link
Copy Markdown
Contributor

Only allow GET HEAD OPTIONS to load wrapper and site media

Only allow GET HEAD OPTIONS to load wrapper and site media
@HelloZeroNet
Copy link
Copy Markdown
Owner

I think a if self.env['REQUEST_METHOD'] != 'GET': restriction will be enough for the actionWrapper (we catch OPTIONS earlier and POST to non-wrapper files are ok.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants