current/doc/source p-config.sgml,2.123,2.124

Update of /cvsroot/ijbswa/current/doc/source
In directory sfp-cvs-1.v30.ch3.sourceforge.com:/tmp/cvs-serv15236/doc/source

Modified Files:
	p-config.sgml 
Log Message:
Document the "trusted-cgi-referer" directive

Sponsored by: Robert Klemme


Index: p-config.sgml
===================================================================
RCS file: /cvsroot/ijbswa/current/doc/source/p-config.sgml,v
retrieving revision 2.123
retrieving revision 2.124
diff -C2 -d -r2.123 -r2.124
*** p-config.sgml	22 May 2016 12:44:02 -0000	2.123
--- p-config.sgml	20 Feb 2017 13:44:54 -0000	2.124
***************
*** 1959,1962 ****
--- 1959,2038 ----
  </sect3>
  
+ <!--   ~~~~~       New section      ~~~~~     -->
+ <sect3 renderas="sect4" id="trusted-cgi-referer"><title>trusted-cgi-referer</title>
+ <variablelist>
+  <varlistentry>
+   <term>Specifies:</term>
+   <listitem>
+    <para>
+     A trusted website or webpage whose links can be followed to reach sensitive CGI pages
+    </para>
+   </listitem>
+  </varlistentry>
+  <varlistentry>
+   <term>Type of value:</term>
+   <listitem>
+    <para>URL or URL prefix</para>
+   </listitem>
+  </varlistentry>
+  <varlistentry>
+   <term>Default value:</term>
+   <listitem>
+    <para>Unset</para>
+   </listitem>
+  </varlistentry>
+  <varlistentry>
+   <term>Effect if unset:</term>
+   <listitem>
+    <para>
+     No external pages are considered trusted referers.
+    </para>
+   </listitem>
+  </varlistentry>
+  <varlistentry>
+   <term>Notes:</term>
+   <listitem>
+    <para>
+     Before &my-app; accepts configuration changes through CGI pages like
+     <link linkend="client-specific-tag">client-tags</link> or the
+     <link linkend="enable-remote-toggle">remote toggle</link>, it checks
+     the Referer header to see if the request comes from a trusted source.
+    </para>
+    <para>
+     By default only the webinterface domains
+     <ulink url="http://config.privoxy.org/">config.privoxy.org</ulink>
+     and
+     <ulink url="http://p.p/">p.p</ulink>
+     are considered trustworthy.
+     Requests originating from other domains are rejected to prevent
+     third-parties from modifiying Privoxy's state by e.g. embedding
+     images that result in CGI requests.
+    </para>
+    <para>
+     In some environments it may be desirable to embed links to CGI pages
+     on external pages, for example on an Intranet homepage the Privoxy admin
+     controls.
+    </para>
+    <para>
+     The <quote>trusted-cgi-referer</quote> option can be used to add that page,
+     or the whole domain, as trusted source so the resulting requests aren't
+     rejected.
+     Requests are accepted if the specified trusted-cgi-refer is the prefix
+     of the Referer.
+    </para>
+    <warning>
+     <para>
+      Declaring pages the admin doesn't control trustworthy may allow
+      malicious third parties to modify Privoxy's internal state against
+      the user's wishes and without the user's knowledge.
+    </para>
+    </warning>
+   </listitem>
+  </varlistentry>
+ </variablelist>
+ 
+ <![%config-file;[<literallayout>@@trusted-cgi-referer http://www.example.org/local-privoxy-control-page</literallayout>]]>
+ </sect3>
+ 
  </sect2>
  


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot