Rob Crittenden 2d6eeb205e Require an HTTP Referer header in the server. Send one in ipa tools. ...

This is to prevent a Cross-Site Request Forgery (CSRF) attack where
a rogue server tricks a user who was logged into the FreeIPA
management interface into visiting a specially-crafted URL where
the attacker could perform FreeIPA oonfiguration changes with the
privileges of the logged-in user.

https://bugzilla.redhat.com/show_bug.cgi?id=747710

2011-12-12 17:36:45 -05:00

..

plugins

User-add random password support

2011-12-12 00:17:07 -05:00

__init__.py

Parse comma-separated lists of values in all parameter types. This can be enabled for a specific parameter by setting the "csv" option to True.

2011-11-30 17:08:35 +01:00

aci.py

Fix uninitialized attributes.

2011-04-21 10:41:29 +02:00

backend.py

Fix lint false positives.

2011-04-13 15:58:45 +02:00

base.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

cli.py

Finalize plugin initialization on demand.

2011-11-22 00:52:24 -05:00

compat.py

Fix lint false positives.

2011-04-13 15:58:45 +02:00

config.py

Finalize plugin initialization on demand.

2011-11-22 00:52:24 -05:00

constants.py

Add SELinux user mapping framework.

2011-12-09 16:46:25 +02:00

crud.py

Fix LDAP object parameter encoding

2011-11-15 13:17:44 +01:00

dn.py

ticket 1569 - Test DN object non-latin Unicode support

2011-08-16 23:28:31 -04:00

encoder.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

errors.py

Require an HTTP Referer header in the server. Send one in ipa tools.

2011-12-12 17:36:45 -05:00

frontend.py

Added commands into metadata.

2011-12-06 22:07:35 +00:00

output.py

Display the entries that failed when deleting with --continue.

2011-01-10 10:32:10 -05:00

parameters.py

Parse comma-separated lists of values in all parameter types. This can be enabled for a specific parameter by setting the "csv" option to True.

2011-11-30 17:08:35 +01:00

pkcs10.py

Fix assorted bugs found by pylint

2011-01-25 14:01:36 -05:00

plugable.py

Restore default log level in server to INFO

2011-12-01 08:34:02 +01:00

request.py

Remove deprecated i18n code from ipalib/request and all references to it.

2011-03-01 10:31:36 -05:00

rpc.py

Require an HTTP Referer header in the server. Send one in ipa tools.

2011-12-12 17:36:45 -05:00

text.py

Fix regressions introduced by pylint false positive fixes.

2011-05-11 16:50:01 +02:00

util.py

Improve zonemgr validator and normalizer

2011-11-29 17:14:28 +01:00

x509.py

Verify that the external CA certificate files are correct.

2011-08-23 01:23:41 -04:00