On Wed, February 10, 2016 11:14 am, John Thurston wrote:

I can disable tests when I use https://x.foo.com/xymon-seccgi/enadis.sh

but when I try to disable tests from a host's "info" page, it quietly fails.

https://x.foo.com/xymon-cgi/svcstatus.sh?HOST=y.foo.com&SERVICE=info

I suspect this is related to the cgi_refererok function added to lib/cgi.c I can see there may be a chance at some logging, but I can't figure out which module on which to enable --debug.

Can someone tell me where I will find the output from cgi_refererok

...

errprintf("Disallowed request due to missing HTTP_HOST variable\n"); or from enadis.c dbgprintf("Not coming from self or svcstatus; abort\n");

Sigh.

There are actually two bugs here:

1. 'info' pages cannot run the javascript validating used for actually submitting the page to enadis.sh, and
2. the 'enadis.sh' page incorrectly redirecting afterwards when it's finished with its processing.

The following two patches should fix these both. (Tested on Chrome, but not yet Firefox.) If you can validate them, that would be helpful.

-jc