*All* <FORM> blocks now contain a nonce field, and the use of
authorArt Cancro <ajc@citadel.org>
Thu, 5 Jul 2007 19:53:58 +0000 (19:53 +0000)
committerArt Cancro <ajc@citadel.org>
Thu, 5 Jul 2007 19:53:58 +0000 (19:53 +0000)
commit0596c6d9b3e9dda73beaa239e6349478667d267d
treec5953d2d56d4a413723181499d977955549f2c26
parentbedf5c0b955473d8ad02eaf628e8d209f534f2b6
*All* <FORM> blocks now contain a nonce field, and the use of
a nonce is now enforced whenever method=POST is used.  This prevents
an attacker from simply removing the nonce entirely.
webcit/floors.c
webcit/notes.c
webcit/roomops.c
webcit/webcit.c