From 23220c6b96dd2665784704bc97c800e6aca2365b Mon Sep 17 00:00:00 2001 From: Nimetu Date: Fri, 3 May 2019 08:59:07 +0300 Subject: [PATCH] Changed: Add extra url parameters only for trusted domain requests --HG-- branch : develop --- code/ryzom/client/src/interface_v3/group_html_webig.cpp | 3 +++ 1 file changed, 3 insertions(+) diff --git a/code/ryzom/client/src/interface_v3/group_html_webig.cpp b/code/ryzom/client/src/interface_v3/group_html_webig.cpp index 8d6ea05af..c7ee1a6c3 100644 --- a/code/ryzom/client/src/interface_v3/group_html_webig.cpp +++ b/code/ryzom/client/src/interface_v3/group_html_webig.cpp @@ -357,6 +357,9 @@ void CGroupHTMLAuth::addHTTPGetParams (string &url, bool trustedDomain) void CGroupHTMLAuth::addHTTPPostParams (SFormFields &formfields, bool trustedDomain) { + // no extras parameters added to url if not in trusted domains list + if (!trustedDomain) return; + if(!UserEntity || !NetMngr.getLoginCookie().isValid()) return; uint32 cid = NetMngr.getLoginCookie().getUserId() * 16 + PlayerSelectedSlot;