Commit Graph
3 Commits
Author SHA1 Message Date
Grégoire ParisandGitHub 893d8c7da0 Forbid method switching
This averts the following scenario:

1. Client POSTs
2. server does not support mod rewrite and 302 redirects to /index.php/theaction
3. client follows, but with a GET
4. 405
2017-11-30 16:41:50 +01:00
Ricardo de Vries ede139a37f Aliases are not supported in the contrib repository. 2017-11-30 16:25:22 +01:00
Ricardo de Vries da5a9bbe60 Merge changes from @Pierstoval. 2017-11-30 16:23:00 +01:00