12 Commits

Author SHA1 Message Date
Ilia Ross
74fd0ca12d Fix XML-RPC CGI execution under miniserv
Some checks failed
Tests / prove (push) Has been cancelled
Package and upload artifacts / build (push) Has been cancelled
Close inactive / close-inactive (push) Has been cancelled
ⓘ Allow xmlrpc.cgi to run when invoked through Webmin's internal CGI do() path while preserving require-safe helper tests, and add regression coverage for CGI header emission.

https://github.com/webmin/webmin/pull/2763#issuecomment-4726296870
2026-06-17 15:06:18 +02:00
Joe Cooper
29f35302ae Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-06-15 14:58:47 -04:00
Joe Cooper
7ca3819d2b xmlrpc.cgi strict, warnings, critic, tests, and security audit 2026-06-15 01:16:09 -05:00
Ilia Ross
e60d005ab0 Fix to enforce RPC-only users before module ACL check
Some checks failed
webmin.dev: webmin/webmin / build (push) Has been cancelled
* Note: Block `rpc=3` users from normal Webmin UI before `init_config` marks module ACLs checked, while explicitly allowing RPC endpoints.

https://github.com/webmin/webmin/actions/runs/25971500591/job/76344191751

45292ea815
2026-05-17 00:55:15 +02:00
Jamie Cameron
b776fad00a Fix more use of .. in include path 2018-07-04 12:24:02 -07:00
Jamie Cameron
caea0eee60 Add refer checking to xmlrpc.cgi, while still allowing direct access 2015-06-06 10:26:37 -07:00
Jamie Cameron
951806e722 remove comments 2013-07-01 20:27:43 -07:00
Jamie Cameron
9479873382 Fix user permission check https://sourceforge.net/tracker/?func=detail&atid=117457&aid=3557515&group_id=17457 2012-08-14 15:49:30 -07:00
Jamie Cameron
69fba29b14 Use new module in top-level CGIs 2009-03-01 07:50:19 +00:00
Jamie Cameron
593c18982c Auto-detect and load API files 2009-02-27 07:37:38 +00:00
Jamie Cameron
cce90a8cfd No referer checking for API 2008-02-09 02:45:28 +00:00
Jamie Cameron
fc1c1b243f Initial checkin of Webmin 2007-04-12 20:24:50 +00:00