Home Explore Help
Sign In
TC
/
Zoraxy
mirror of https://git.hkwtc.org/TC/ReverseProxy
1
0
Fork 0
Files Issues 0 Wiki
Browse Source

Added csrf token to all tools

Toby Chui 7 months ago
parent
a48119f5ac
commit
6bbefca7bd
3 changed files with 24 additions and 8 deletions
Split View Show Diff Stats
  1. 18 6
      web/tools/ipscan.html
  2. 3 1
      web/tools/mdns.html
  3. 3 1
      web/tools/sshconn.html

+ 18 - 6
web/tools/ipscan.html
View File 

@@ -1,6 +1,7 @@
 
 <!DOCTYPE html>

 <html>

     <head>

+        <meta name="zoraxy.csrf.Token" content="{{.csrfToken}}">

         <meta name="apple-mobile-web-app-capable" content="yes" />

         <meta name="viewport" content="user-scalable=no, width=device-width, initial-scale=1, maximum-scale=1"/>

         <meta charset="UTF-8">

@@ -13,6 +14,7 @@
 
         <script src="../script/semantic/semantic.min.js"></script>

         <script src="../script/tablesort.js"></script>

         <link rel="stylesheet" href="../main.css">

+        <script src="../script/utils.js"></script>

         <style>

             .offlinehost{

                 display: none;

@@ -86,9 +88,14 @@
 
                         <div class="ui basic segment" align="center">

                             <i class="loading spinner icon"></i> Scanning

                         </div>`);

-                    $.post("/api/tools/ipscan", {start: start, end: end}, function(data) {

-                        displayResults(data);

-                        $(".scanbtn").removeClass("disabled");

+                    $.cjax({

+                        url: "/api/tools/ipscan",

+                        data: {start: start, end: end},

+                        method: "POST",

+                        success: function(data){

+                            displayResults(data);

+                            $(".scanbtn").removeClass("disabled");

+                        }

                     });

                 });

         

@@ -109,9 +116,14 @@
 
                         <div class="ui basic segment" align="center">

                             <i class="loading spinner icon"></i> Scanning

                         </div>`);

-                    $.post("/api/tools/ipscan", {cidr: cidr}, function(data) {

-                        displayResults(data);

-                        $(".scanbtn").removeClass("disabled");

+                    $.cjax({

+                        url: "/api/tools/ipscan",

+                        method: "POST",

+                        data: {cidr: cidr},

+                        success: function(data) {

+                            displayResults(data);

+                            $(".scanbtn").removeClass("disabled");

+                        }

                     });

                 });

+ 3 - 1
web/tools/mdns.html
View File 

@@ -1,6 +1,7 @@
 
 <!DOCTYPE html>

 <html>

     <head>

+        <meta name="zoraxy.csrf.Token" content="{{.csrfToken}}">

         <meta name="apple-mobile-web-app-capable" content="yes" />

         <meta name="viewport" content="user-scalable=no, width=device-width, initial-scale=1, maximum-scale=1"/>

         <meta charset="UTF-8">

@@ -13,6 +14,7 @@
 
         <script src="../script/semantic/semantic.min.js"></script>

         <script src="../script/tablesort.js"></script>

         <link rel="stylesheet" href="../main.css">

+        <script src="../script/utils.js"></script>

         <style>

             body{

                 overflow-x: auto;

@@ -54,7 +56,7 @@
 
                 var domain = $("#domain").val();

                 $("#discover").addClass("loading").addClass('disabled');

                 setCountdown();

-                $.ajax({

+                $.cjax({

                     type: "POST",

                     url: "/api/mdns/discover",

                     data: { domain: domain },

+ 3 - 1
web/tools/sshconn.html
View File 

@@ -1,6 +1,7 @@
 
 <!DOCTYPE html>

 <html>

     <head>

+        <meta name="zoraxy.csrf.Token" content="{{.csrfToken}}">

         <meta name="apple-mobile-web-app-capable" content="yes" />

         <meta name="viewport" content="user-scalable=no, width=device-width, initial-scale=1, maximum-scale=1"/>

         <meta charset="UTF-8">

@@ -13,6 +14,7 @@
 
         <script src="../script/semantic/semantic.min.js"></script>

         <script src="../script/tablesort.js"></script>

         <link rel="stylesheet" href="../main.css">

+        <script src="../script/utils.js"></script>

         <style>

             #loadingUI{

                 width: 100%;

@@ -153,7 +155,7 @@
 
             //Try to ask the server side to create a ssh proxy object

             function createSSHProxy(remoteAddr, remotePort, username){

                 //Request to create a ssh session instance

-                $.ajax({

+                $.cjax({

                     url: "/api/tools/webssh",

                     data: {ipaddr: remoteAddr, port: remotePort, username:username},

                     method: "POST",