Merge pull request #1 from silverstripe-security/pulls/master/ss-2018…

…-022 [SS-2018-022] ADD ConfirmationMiddleware exceptions for the dev routes
silverstripe · Jun 11, 2019 · d8452c6 · d8452c6
2 parents 6fe0b18 + e757c94
commit d8452c6
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/_config/routes.yml b/_config/routes.yml
@@ -12,3 +12,14 @@ SilverStripe\Dev\DevelopmentAdmin:
       controller: Silverstripe\EnvironmentCheck\Controllers\DevCheckController
       links:
         check: 'Run registered environment checks and display their status'
+
+---
+Name: environmentcheckroutes-dev_urls-confirmation-exceptions
+After:
+  - 'dev_urls-confirmation-middleware'
+---
+SilverStripe\Core\Injector\Injector:
+  DevUrlsConfirmationMiddleware:
+    properties:
+      Bypasses:
+        - '%$SilverStripe\Control\Middleware\ConfirmationMiddleware\UrlPathStartsWith("dev/check")'