Details
-
Improvement
-
Status: Closed
-
Minor
-
Resolution: Fixed
-
0.19.0
-
None
-
None
-
Reviewed
Description
Although the option to kill jobs via the web interface is turned off by default, it should be made safer. Currently the "kill" action and its confirmation is just a link so it could be triggered by a crawler or by a browser's pre-fetching mechanism. The attached patch makes it work only with "POST" so that e.g. well-behaved crawlers shouldn't be able to access it.