Skip to content

Fix GET requests being able to change state of LAVA

Igor Ponomarev requested to merge fix-get-requests-affecting-state-javascript into master

Otherwise it is possible to use CSRF to delete tokens and queries, cancel and fail jobs.

Closes #619

Merge request reports