Skip to content

Commit 173490a

Browse files
author
zzz
committed
Merge branch 'snark-post' into 'master'
i2psnark: require POST on all forms See merge request i2p-hackers/i2p.i2p!224
2 parents 9894b4d + f09262a commit 173490a

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

apps/i2psnark/java/src/org/klomp/snark/web/I2PSnarkServlet.java

+3-1
Original file line numberDiff line numberDiff line change
@@ -291,7 +291,9 @@ else if (method.equals("POST"))
291291

292292
String nonce = req.getParameter("nonce");
293293
if (nonce != null) {
294-
if (nonce.equals(String.valueOf(_nonce)))
294+
// the clear messages button is a GET
295+
if ((method.equals("POST") || "Clear".equals(req.getParameter("action"))) &&
296+
nonce.equals(String.valueOf(_nonce)))
295297
processRequest(req);
296298
else // nonce is constant, shouldn't happen
297299
_manager.addMessage("Please retry form submission (bad nonce)");

0 commit comments

Comments
 (0)