From d643e8c673f2580817fb3515cd150b213d622108 Mon Sep 17 00:00:00 2001 From: Michael Kaufmann Date: Fri, 30 Dec 2022 21:48:59 +0100 Subject: [PATCH] exclude csrf_token from froxlor-config.json export; exclude system.updatecheck_data from settings-export Signed-off-by: Michael Kaufmann --- lib/Froxlor/Ajax/Ajax.php | 1 + lib/Froxlor/SImExporter.php | 3 ++- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/lib/Froxlor/Ajax/Ajax.php b/lib/Froxlor/Ajax/Ajax.php index 7aaa9d69..1f7f49a3 100644 --- a/lib/Froxlor/Ajax/Ajax.php +++ b/lib/Froxlor/Ajax/Ajax.php @@ -365,6 +365,7 @@ class Ajax $params = $_GET; unset($params['action']); unset($params['finish']); + unset($params['csrf_token']); header('Content-disposition: attachment; filename=froxlor-config-' . time() . '.json'); return $this->jsonResponse($params); } diff --git a/lib/Froxlor/SImExporter.php b/lib/Froxlor/SImExporter.php index 1e8df164..458b8b5b 100644 --- a/lib/Froxlor/SImExporter.php +++ b/lib/Froxlor/SImExporter.php @@ -56,7 +56,8 @@ class SImExporter 'system.last_tasks_run', 'system.last_archive_run', 'system.leprivatekey', - 'system.lepublickey' + 'system.lepublickey', + 'system.updatecheck_data', ]; public static function export()