Remove clearAction from the media REST API for security
This commit is contained in:
parent
c829b6bf95
commit
8ffd70781b
|
@ -78,6 +78,8 @@ class Rest_MediaController extends Zend_Rest_Controller
|
|||
}
|
||||
}
|
||||
|
||||
/* This action is extremely dangerous and a horrible idea without CSRF protection.
|
||||
|
||||
public function clearAction()
|
||||
{
|
||||
if (!$this->verifyAuth(true, true))
|
||||
|
@ -113,6 +115,7 @@ class Rest_MediaController extends Zend_Rest_Controller
|
|||
->setHttpResponseCode(200)
|
||||
->appendBody("Library has been cleared");
|
||||
}
|
||||
*/
|
||||
|
||||
public function getAction()
|
||||
{
|
||||
|
|
Loading…
Reference in New Issue