Gmer4Lfe c34224effa Carry the CSRF token on fetch requests and put mutations behind POST ...

Unraid already enforces CSRF on every POST via auto_prepend, but its
injector is jQuery-only — the plugin's native fetch() calls carried no
token and were being terminated before the endpoint ran, silently,
because csrf_terminate exits with an empty body that r.json() swallows.

2026-08-02 10:28:53 -04:00

..

api_test.php

Carry the CSRF token on fetch requests and put mutations behind POST

2026-08-02 10:28:53 -04:00

arrs.php

Carry the CSRF token on fetch requests and put mutations behind POST

2026-08-02 10:28:53 -04:00

auth.php

Carry the CSRF token on fetch requests and put mutations behind POST

2026-08-02 10:28:53 -04:00

board.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

cert.php

Carry the CSRF token on fetch requests and put mutations behind POST

2026-08-02 10:28:53 -04:00

checklist.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

clearlock.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

conf_toggle.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

confform.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

config.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

create_api_key.php

Carry the CSRF token on fetch requests and put mutations behind POST

2026-08-02 10:28:53 -04:00

docker_action.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

docker_pull_worker.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

docker.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

dryrun.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

fallback.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

flag_toggle.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

import_script.php

Carry the CSRF token on fetch requests and put mutations behind POST

2026-08-02 10:28:53 -04:00

log.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

manual_sync.php

Carry the CSRF token on fetch requests and put mutations behind POST

2026-08-02 10:28:53 -04:00

media.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

monitor_fast.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

monitor_remote.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

monitor.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

movescript.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

partnership_ping.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

partnership_settings.php

Carry the CSRF token on fetch requests and put mutations behind POST

2026-08-02 10:28:53 -04:00

partnership.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

rawconf.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

readscript.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

recent.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

reorderarray.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

rsync_profiles.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

rsync_standalone.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

rsync_win_arrays.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

rsync.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

run.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

savefolders.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

scheduler.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

script.php

Carry the CSRF token on fetch requests and put mutations behind POST

2026-08-02 10:28:53 -04:00

scriptinfo.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

settings.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

setup.php

Carry the CSRF token on fetch requests and put mutations behind POST

2026-08-02 10:28:53 -04:00

snapshot.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

status.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

stop.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

storage.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

system.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

watchdog.php

Document the PHP api layer and fix what documenting it exposed

2026-08-02 10:11:39 -04:00

webhook.php

Carry the CSRF token on fetch requests and put mutations behind POST

2026-08-02 10:28:53 -04:00