Rob Crittenden 2d6eeb205e Require an HTTP Referer header in the server. Send one in ipa tools. ...

This is to prevent a Cross-Site Request Forgery (CSRF) attack where
a rogue server tricks a user who was logged into the FreeIPA
management interface into visiting a specially-crafted URL where
the attacker could perform FreeIPA oonfiguration changes with the
privileges of the logged-in user.

https://bugzilla.redhat.com/show_bug.cgi?id=747710

2011-12-12 17:36:45 -05:00

..

ipa-client-install

Require an HTTP Referer header in the server. Send one in ipa tools.

2011-12-12 17:36:45 -05:00

Makefile.am

Autotool ipa-client - patch from William Jon McCann <mccann@jhu.edu>

-