Add Dry Run button; fix CSRF token on all POST API calls
All fetch() POSTs now send application/x-www-form-urlencoded with the page-injected csrf_token, satisfying unRAID's auto_prepend CSRF check. All PHP API handlers switched from php://input JSON to $_POST. Also adds Dry Run button (orange, between Run and Log) that sets DRY_RUN=1 in the script environment before executing.
This commit is contained in:
@@ -61,6 +61,9 @@
|
||||
.vv-run-btn { border-color: #2196f3 !important; color: #2196f3 !important; }
|
||||
.vv-run-btn:hover { background: #0d47a1 !important; color: #fff !important;
|
||||
border-color: #2196f3 !important; }
|
||||
.vv-dry-btn { border-color: #ff9800 !important; color: #ff9800 !important; }
|
||||
.vv-dry-btn:hover { background: #e65100 !important; color: #fff !important;
|
||||
border-color: #ff9800 !important; }
|
||||
|
||||
/* Log panel */
|
||||
.vv-log-panel { margin-top: 10px; border-top: 1px solid #333; padding-top: 8px; }
|
||||
|
||||
Reference in New Issue
Block a user