mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-01-19 12:42:58 -06:00
2d6eeb205e
This is to prevent a Cross-Site Request Forgery (CSRF) attack where a rogue server tricks a user who was logged into the FreeIPA management interface into visiting a specially-crafted URL where the attacker could perform FreeIPA oonfiguration changes with the privileges of the logged-in user. https://bugzilla.redhat.com/show_bug.cgi?id=747710 |
||
---|---|---|
.. | ||
install | ||
plugins | ||
__init__.py | ||
conn.py | ||
ipaldap.py | ||
ipautil.py | ||
rpcserver.py |