Changeset 862 for trunk/server/source3/web/swat.c

Timestamp:

May 13, 2014, 11:39:04 AM (11 years ago)

Author:

Silvan Scherrer

Message:

Samba Server: update trunk to 3.6.23

Location:

trunk/server

Files:

• . (modified) (1 prop)
• source3/web/swat.c (modified) (3 diffs)

trunk/server/source3/web/swat.c

@@ -155 +155 @@
         uint8_t token[16];
         int i;
+        char *nonce = cgi_nonce();
 
         token_str[0] = '\0';
@@ -168 +169 @@
                 MD5Update(&md5_ctx, (uint8_t *)pass, strlen(pass));
         }
+        MD5Update(&md5_ctx, (uint8_t *)nonce, strlen(nonce));
 
         MD5Final(token, &md5_ctx);
@@ -267 +269 @@
                 printf("Expires: 0\r\n");
         }
-        printf("Content-type: text/html\r\n\r\n");
+        printf("Content-type: text/html\r\n");
+        printf("X-Frame-Options: DENY\r\n\r\n");
 
         if (!include_html("include/header.html")) {