v18 LibreELEC Testbuilds for RaspberryPi (Kodi 18.0)
(2017-06-08, 03:16)Milhouse Wrote:
(2017-06-08, 02:43)kkoa Wrote: Wouldn't it still be possbile to make a form targetting a frame to hijack Kodi with a post request then?

Not entirely sure.

I don't see any reason why it wouldn't work.

Code:
<form action="http://libreelec:8080/jsonrpc?[RPC-REQUEST]" method="post"></form>

Then submit it via js and you'd have the same insecurity as before.


Messages In This Thread
RE: LibreELEC Testbuilds for RaspberryPi (Kodi 18.0) - by kkoa - 2017-06-08, 15:24
WD MyCloud - by crisp waffles - 2017-09-06, 03:11
No 3D Playback since Version - by Mike74 - 2017-10-09, 19:25
Migrating from RPi2 to RPi1 - by RappaSan - 2017-11-10, 14:45
RE: Migrating from RPi2 to RPi1 - by Milhouse - 2017-11-10, 21:06
RE: Migrating from RPi2 to RPi1 - by RappaSan - 2017-11-11, 09:17
Resolution broken after 0415 - by lozbrown85 - 2018-04-20, 11:48
popt 1.16 - by n0n4m3 - 2018-06-29, 00:28
RE: popt 1.16 - by Milhouse - 2018-06-29, 06:39
A plugin to be resurrected - by ArminiusTux - 2018-10-22, 22:02
RE: A plugin to be resurrected - by Milhouse - 2018-10-23, 02:46
Logout Mark Read Team Forum Stats Members Help
LibreELEC Testbuilds for RaspberryPi (Kodi 18.0)24