MightyPork/airsonic-custom
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Merge pull request #246 from fxthomas/244-fix-shuffle-radio-csrf

Browse Source 
Fix CSRF issue in shuffle radio
This commit is contained in:
Andrew DeMaria
2017-02-11 15:19:08 -07:00
committed by GitHub
parent 92a6f45ae9 4316292ce7
commit 9110f689d3
1 changed files with 11 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
libresonic-main/src/main/webapp/WEB-INF/jsp/more.jsp
+11 -2
View File
@@ -62,6 +62,7 @@
} catch(e) { return; } } catch(e) { return; }
elements = form.getElementsByTagName("input"); elements = form.getElementsByTagName("input");
for (var i = 0; i < elements.length; i++) { for (var i = 0; i < elements.length; i++) {
if (elements[i].type == "hidden") continue;
if (elements[i].type == "submit") continue; if (elements[i].type == "submit") continue;
if (data[elements[i].name]) elements[i].value = data[elements[i].name]; if (data[elements[i].name]) elements[i].value = data[elements[i].name];
} }
@@ -87,9 +88,17 @@
var data = {} var data = {}
var elements = []; var elements = [];
elements = form.getElementsByTagName("input"); elements = form.getElementsByTagName("input");
for (var i = 0; i < elements.length; i++) data[elements[i].name] = elements[i].value; for (var i = 0; i < elements.length; i++) {
if (elements[i].type == "hidden") continue;
if (elements[i].type == "submit") continue;
data[elements[i].name] = elements[i].value;
}
elements = form.getElementsByTagName("select"); elements = form.getElementsByTagName("select");
for (var i = 0; i < elements.length; i++) data[elements[i].name] = elements[i].value; for (var i = 0; i < elements.length; i++) {
if (elements[i].type == "hidden") continue;
if (elements[i].type == "submit") continue;
data[elements[i].name] = elements[i].value;
}
localStorage.setItem("randomPlayQueue", JSON.stringify(data)); localStorage.setItem("randomPlayQueue", JSON.stringify(data));
} }