]> git.ipfire.org Git - thirdparty/pdns.git/commit
API: Replace HTTP Basic auth with static key in custom header 1782/head
authorChristian Hofstaedtler <christian@hofstaedtler.name>
Mon, 6 Oct 2014 21:51:01 +0000 (23:51 +0200)
committerChristian Hofstaedtler <christian@hofstaedtler.name>
Tue, 7 Oct 2014 05:30:27 +0000 (07:30 +0200)
commitbbef8f04823bcd8b5f7bba9e319016d7df4359d0
tree250f3a8ddb833f777a953820982666cffaa41124
parentdbe7dac21158b359db7ba34af79a25f91ab8ce1e
API: Replace HTTP Basic auth with static key in custom header

Given that the key is sent in a custom header, this should prevent
any possible CSRF attacks.

Fixes #1769.
13 files changed:
pdns/common_startup.cc
pdns/docs/httpapi/README.md
pdns/docs/httpapi/api_spec.md
pdns/docs/pdns.xml
pdns/pdns.conf-dist
pdns/pdns_recursor.cc
pdns/webserver.cc
pdns/webserver.hh
pdns/ws-auth.cc
pdns/ws-recursor.cc
pdns/ws-recursor.hh
regression-tests.api/runtests.py
regression-tests.api/test_helper.py