fix: cross site forgery (#76)

* fix: cross site forgery * fix: cross site forgery route
corona-warn-app · Jun 11, 2020 · 054e2f5 · 054e2f5
1 parent 2c160c3
commit 054e2f5
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 2 deletions.
diff --git a/.gitignore b/.gitignore
@@ -29,3 +29,6 @@ build/
 
 ### VS Code ###
 .vscode/
+
+build.sh
+trusted.key
diff --git a/...main/java/app/coronawarn/verification/portal/controller/VerificationPortalController.java b/...main/java/app/coronawarn/verification/portal/controller/VerificationPortalController.java
@@ -137,7 +137,7 @@ public String start(HttpServletRequest request, Model model) {
    * @param model   the thymeleaf model
    * @return the name of the Thymeleaf template to be used for the HTML page
    */
-  @RequestMapping(value = ROUTE_TELETAN, method = {RequestMethod.GET, RequestMethod.POST})
+  @PostMapping(value = ROUTE_TELETAN)
   public String teletan(HttpServletRequest request, Model model) {
 
     TeleTan teleTan = new TeleTan("123456789");
@@ -181,6 +181,6 @@ public String logout(HttpServletRequest request) {
     } catch (ServletException e) {
       log.error("Logout failed", e);
     }
-    return "redirect:" + TEMPLATE_TELETAN;
+    return "redirect:" + TEMPLATE_START;
   }
 }