mirrors/seaweedfs
1
0
Fork 0
mirror of https://github.com/seaweedfs/seaweedfs.git synced 2026-05-22 01:31:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

admin: require CSRF for S3 tables bucket writes

Browse Source
This commit is contained in:
Chris Lu
2026-02-10 17:58:45 -08:00
parent 5c365e7090
commit 263b7bbf53
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
weed/admin/dash/s3tables_management.go
View File

@@ -579,6 +579,9 @@ func (s *AdminServer) ListS3TablesBucketsAPI(c *gin.Context) {
}
func (s *AdminServer) CreateS3TablesBucket(c *gin.Context) {
if !requireSessionCSRFToken(c) {
return
}
var req struct {
Name string `json:"name"`
Tags map[string]string `json:"tags"`
@@ -664,6 +667,9 @@ func (s *AdminServer) SetTableBucketOwner(ctx context.Context, bucketName, owner
}
func (s *AdminServer) DeleteS3TablesBucket(c *gin.Context) {
if !requireSessionCSRFToken(c) {
return
}
bucketArn := c.Query("bucket")
if bucketArn == "" {
c.JSON(400, gin.H{"error": "Bucket ARN is required"})