mirror of
https://github.com/ZoneMinder/zoneminder.git
synced 2026-10-15 10:41:38 -04:00
Isaac ConnorandClaude Opus 5.5
7eb7dc4bff
actions/control.php and actions/eventdetail.php redirected to $_SERVER['HTTP_REFERER'] as is. That is the Referer of the POST itself, which normally comes from a ZoneMinder page, and the CSRF token keeps other sites from making the POST, so it isn't the open redirect the zone save had. But it is the same pattern, and a missing Referer warned about an undefined index and rendered the action's view instead of redirecting. Use localRedirectUrl() as the zone save does, falling back to the monitor's control view and to the events list. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>