From caea0eee60b70aebc0e3dba11480296f81d99b20 Mon Sep 17 00:00:00 2001
From: Jamie Cameron <jcameron@webmin.com>
Date: Sat, 6 Jun 2015 10:26:37 -0700
Subject: [PATCH] Add refer checking to xmlrpc.cgi, while still allowing direct
 access

---
 xmlrpc.cgi | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/xmlrpc.cgi b/xmlrpc.cgi
index 9cb0fa107..64314cbcf 100755
--- a/xmlrpc.cgi
+++ b/xmlrpc.cgi
@@ -20,7 +20,7 @@ use WebminCore;
 use POSIX;
 use Socket;
 $force_lang = $default_lang;
-$trust_unknown_referers = 1;
+$trust_unknown_referers = 2;	# Only trust if referer was not set
 &init_config();
 $main::error_must_die = 1;