Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow CSRF security key to be refreshed at command line #4012

Closed
TheWitness opened this issue Dec 18, 2020 · 0 comments
Closed

Allow CSRF security key to be refreshed at command line #4012

TheWitness opened this issue Dec 18, 2020 · 0 comments
Labels
enhancement General tag for an enhancement resolved A fixed issue
Milestone

Comments

@TheWitness
Copy link
Member

Feature Request

Is your feature request related to a problem? Please describe

Cacti provides CSRF protection. Part of that CSRF protection is a security key that is used to decrypt the packet sent back and forth from the client along with posts. However, there is no way to easily force the renewal of this key.

This should not be needed frequently, but having a script will make a a Cacti admins job easier.

Describe the solution you'd like

A simple script to renew the CSRF secret file and data.

@TheWitness TheWitness added the enhancement General tag for an enhancement label Dec 18, 2020
@TheWitness TheWitness added this to the v1.2.17 milestone Dec 18, 2020
TheWitness added a commit that referenced this issue Dec 18, 2020
Provide CLI script to renew the CSRF security key for CSRF protection
@TheWitness TheWitness added the resolved A fixed issue label Dec 18, 2020
@github-actions github-actions bot locked and limited conversation to collaborators Mar 19, 2021
@netniV netniV changed the title Provide CLI script to renew the CSRF security key for CSRF protection Allow CSRF security key to be refreshed at command line Apr 12, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
enhancement General tag for an enhancement resolved A fixed issue
Projects
None yet
Development

No branches or pull requests

1 participant