The cgi scripts used for internal processing should require http POST
Closed this issue · 1 comments
oyvindhagberg commented
... to go along with the principle that http GET requests should not cause changes to data on the server.
oyvindhagberg commented
There's only one CGI script this applies to - processarchive. It already restricts access to 127.0.0.1 and thus is not part of the public API. It doesn't have to follow conventions.