fergalmoran/chrometophone
1
0
Fork 0
mirror of https://github.com/fergalmoran/chrometophone.git synced 2025-12-22 09:41:51 +00:00
Code Issues 265 Packages Projects Releases Wiki Activity

Rollback XSS for Firefox temporarily

Browse Source
This commit is contained in:
burke.davey
2010-06-12 00:35:33 +00:00
parent 5a9da97f81
commit 9d7e78abea
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
appengine/src/com/google/android/chrometophone/server/SendServlet.java
View File

@@ -52,7 +52,8 @@ public class SendServlet extends HttpServlet {
resp.setContentType("text/plain"); resp.setContentType("text/plain");
// Basic XSRF protection // Basic XSRF protection
if (req.getHeader("X-Extension") == null) { if (req.getHeader("X-Extension") == null &&
req.getHeader("User-Agent").indexOf("Firefox") == -1) { // TODO: Remove exception for Firefox
resp.setStatus(400); resp.setStatus(400);
resp.getWriter().println(ERROR_STATUS + " You are using an old version of the extension that is no " + resp.getWriter().println(ERROR_STATUS + " You are using an old version of the extension that is no " +
"longer supported. Please install v0.2 or later of the extension " + "longer supported. Please install v0.2 or later of the extension " +