unioslo/nivlheim

The cgi scripts used for internal processing should require http POST

Closed this issue · 1 comments

... to go along with the principle that http GET requests should not cause changes to data on the server.

There's only one CGI script this applies to - processarchive. It already restricts access to 127.0.0.1 and thus is not part of the public API. It doesn't have to follow conventions.