CHANGES · ad41158e0ae128694b3fb4298bdb6b90bc3cb673 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd · GitLab

Prevent CSRF attacks against the balancer-manager (CVE-2007-6420) · ad41158e

Joe Orton authored May 30, 2008

* modules/proxy/mod_proxy_balancer.c (balancer_init): New function.
  (balancer_handler): Place a nonce in the form output, and check that
  the submitted form data includes that nonce.
  (ap_proxy_balancer_register_hook): Register the new post_config hook.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@661666 13f79535-47bb-0310-9956-ffa450edef68

ad41158e

To find the state of this project's repository at the time of any of these versions, check out the tags.