Rob Crittenden 9f10fb20e9 Require an HTTP Referer header in the server. Send one in ipa tools. ...

This is to prevent a Cross-Site Request Forgery (CSRF) attack where
a rogue server tricks a user who was logged into the FreeIPA
management interface into visiting a specially-crafted URL where
the attacker could perform FreeIPA oonfiguration changes with the
privileges of the logged-in user.

https://bugzilla.redhat.com/show_bug.cgi?id=747710

2011-12-05 16:02:24 -05:00

..

plugins

Don't allow default objectclass list to be empty.

2011-11-09 08:50:25 +01:00

__init__.py

Fix typos

2011-09-07 13:21:06 +02:00

aci.py

Fix uninitialized attributes.

2011-04-21 10:41:29 +02:00

backend.py

Fix lint false positives.

2011-04-13 15:58:45 +02:00

base.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

cli.py

Fix problems in help system

2011-10-20 18:25:51 -04:00

compat.py

Fix lint false positives.

2011-04-13 15:58:45 +02:00

config.py

Let the framework be able to override the hostname.

2011-06-23 02:11:34 -04:00

constants.py

Let Bind track data changes

2011-08-31 16:46:26 +02:00

crud.py

Fix automountkey-mod

2011-08-18 20:35:24 -04:00

dn.py

ticket 1569 - Test DN object non-latin Unicode support

2011-08-16 23:27:46 -04:00

encoder.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

errors.py

Require an HTTP Referer header in the server. Send one in ipa tools.

2011-12-05 16:02:24 -05:00

frontend.py

Require current password when using passwd to change your own password.

2011-10-04 15:16:38 +02:00

output.py

Display the entries that failed when deleting with --continue.

2011-01-10 10:32:10 -05:00

parameters.py

Require current password when using passwd to change your own password.

2011-10-04 15:16:38 +02:00

pkcs10.py

Fix assorted bugs found by pylint

2011-01-25 14:01:36 -05:00

plugable.py

Cleanup whitespace

2011-09-13 11:36:38 +02:00

request.py

Remove deprecated i18n code from ipalib/request and all references to it.

2011-03-01 10:31:36 -05:00

rpc.py

Require an HTTP Referer header in the server. Send one in ipa tools.

2011-12-05 16:02:24 -05:00

text.py

Fix regressions introduced by pylint false positive fixes.

2011-05-11 16:50:01 +02:00

util.py

Make data type of certificates more obvious/predictable internally.

2011-06-21 19:09:50 -04:00

x509.py

Verify that the external CA certificate files are correct.

2011-08-23 01:23:50 -04:00