Fixed #8301 CSRF Enabled on all widgets.

Enabled CSRF on all widgets.
2025-10-26 11:38:35 +00:00 · 2018-02-01 10:15:42 -06:00 · 2018-02-01 10:15:42 -06:00 · ce7b40ce96
commit ce7b40ce96
parent 3c44c845fe
18 changed files with 0 additions and 34 deletions
--- a/src/usr/local/www/widgets/widgets/captive_portal_status.widget.php
+++ b/src/usr/local/www/widgets/widgets/captive_portal_status.widget.php
@ -24,8 +24,6 @@
 * limitations under the License.
 */

-$nocsrf = true;
-
 require_once("globals.inc");
 require_once("guiconfig.inc");
 require_once("pfsense-utils.inc");
--- a/src/usr/local/www/widgets/widgets/carp_status.widget.php
+++ b/src/usr/local/www/widgets/widgets/carp_status.widget.php
@ -20,8 +20,6 @@
 * limitations under the License.
 */

-$nocsrf = true;
-
 require_once("guiconfig.inc");
 require_once("pfsense-utils.inc");
 require_once("functions.inc");
--- a/src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php
+++ b/src/usr/local/www/widgets/widgets/dyn_dns_status.widget.php
@ -20,7 +20,6 @@
 * limitations under the License.
 */

-$nocsrf = true;
 global $dyndns_split_domain_types;

 require_once("guiconfig.inc");
--- a/src/usr/local/www/widgets/widgets/gateways.widget.php
+++ b/src/usr/local/www/widgets/widgets/gateways.widget.php
@ -24,8 +24,6 @@
 * limitations under the License.
 */

-$nocsrf = true;
-
 require_once("guiconfig.inc");
 require_once("pfsense-utils.inc");
 require_once("functions.inc");
--- a/src/usr/local/www/widgets/widgets/gmirror_status.widget.php
+++ b/src/usr/local/www/widgets/widgets/gmirror_status.widget.php
@ -23,8 +23,6 @@
 * limitations under the License.
 */

-$nocsrf = true;
-
 require_once("guiconfig.inc");
 require_once("gmirror.inc");

--- a/src/usr/local/www/widgets/widgets/installed_packages.widget.php
+++ b/src/usr/local/www/widgets/widgets/installed_packages.widget.php
@ -26,8 +26,6 @@
 * limitations under the License.
 */

-$nocsrf = true;
-
 require_once("guiconfig.inc");
 require_once("pfsense-utils.inc");
 require_once("functions.inc");
--- a/src/usr/local/www/widgets/widgets/interface_statistics.widget.php
+++ b/src/usr/local/www/widgets/widgets/interface_statistics.widget.php
@ -26,8 +26,6 @@
 * limitations under the License.
 */

-$nocsrf = true;
-
 require_once("guiconfig.inc");
 require_once("pfsense-utils.inc");
 require_once("functions.inc");
--- a/src/usr/local/www/widgets/widgets/interfaces.widget.php
+++ b/src/usr/local/www/widgets/widgets/interfaces.widget.php
@ -20,8 +20,6 @@
 * limitations under the License.
 */

-$nocsrf = true;
-
 require_once("guiconfig.inc");
 require_once("pfsense-utils.inc");
 require_once("functions.inc");
--- a/src/usr/local/www/widgets/widgets/ipsec.widget.php
+++ b/src/usr/local/www/widgets/widgets/ipsec.widget.php
@ -26,8 +26,6 @@
 * limitations under the License.
 */

-$nocsrf = true;
-
 require_once("auth_check.inc");
 require_once("functions.inc");
 require_once("ipsec.inc");
--- a/src/usr/local/www/widgets/widgets/load_balancer_status.widget.php
+++ b/src/usr/local/www/widgets/widgets/load_balancer_status.widget.php
@ -25,8 +25,6 @@
 * limitations under the License.
 */

-$nocsrf = true;
-
 require_once("guiconfig.inc");
 require_once("pfsense-utils.inc");
 require_once("functions.inc");
--- a/src/usr/local/www/widgets/widgets/log.widget.php
+++ b/src/usr/local/www/widgets/widgets/log.widget.php
@ -20,8 +20,6 @@
 * limitations under the License.
 */

-$nocsrf = true;
-
 require_once("guiconfig.inc");
 require_once("pfsense-utils.inc");
 require_once("functions.inc");
--- a/src/usr/local/www/widgets/widgets/netgate_services_and_support.widget.php
+++ b/src/usr/local/www/widgets/widgets/netgate_services_and_support.widget.php
@ -30,7 +30,6 @@

 require_once("guiconfig.inc");

-$nocsrf = true;
 $supportfile = "/var/db/support.json";
 $idfile = "/var/db/uniqueid";
 $FQDN = "https://ews.netgate.com/support";
--- a/src/usr/local/www/widgets/widgets/ntp_status.widget.php
+++ b/src/usr/local/www/widgets/widgets/ntp_status.widget.php
@ -19,8 +19,6 @@
 * limitations under the License.
 */

-$nocsrf = true;
-
 require_once("guiconfig.inc");
 require_once("pfsense-utils.inc");
 require_once("functions.inc");
--- a/src/usr/local/www/widgets/widgets/openvpn.widget.php
+++ b/src/usr/local/www/widgets/widgets/openvpn.widget.php
@ -19,8 +19,6 @@
 * limitations under the License.
 */

-$nocsrf = true;
-
 require_once("guiconfig.inc");
 require_once("openvpn.inc");

--- a/src/usr/local/www/widgets/widgets/picture.widget.php
+++ b/src/usr/local/www/widgets/widgets/picture.widget.php
@ -19,8 +19,6 @@
 * limitations under the License.
 */

-$nocsrf = true;
-
 require_once("guiconfig.inc");
 require_once("pfsense-utils.inc");
 require_once("functions.inc");
--- a/src/usr/local/www/widgets/widgets/rss.widget.php
+++ b/src/usr/local/www/widgets/widgets/rss.widget.php
@ -19,8 +19,6 @@
 * limitations under the License.
 */

-$nocsrf = true;
-
 require_once("guiconfig.inc");
 require_once("pfsense-utils.inc");
 require_once("functions.inc");
--- a/src/usr/local/www/widgets/widgets/services_status.widget.php
+++ b/src/usr/local/www/widgets/widgets/services_status.widget.php
@ -20,8 +20,6 @@
 * limitations under the License.
 */

-$nocsrf = true;
-
 require_once("guiconfig.inc");
 require_once("captiveportal.inc");
 require_once("service-utils.inc");
--- a/src/usr/local/www/widgets/widgets/wake_on_lan.widget.php
+++ b/src/usr/local/www/widgets/widgets/wake_on_lan.widget.php
@ -20,8 +20,6 @@
 * limitations under the License.
 */

-$nocsrf = true;
-
 require_once("guiconfig.inc");
 require_once("/usr/local/www/widgets/include/wake_on_lan.inc");