From b0a6781623117a362dcc8415eba36e3b096a24f6 Mon Sep 17 00:00:00 2001 From: Jeremy Stretch Date: Wed, 12 Dec 2018 09:20:07 -0500 Subject: [PATCH] Fixes #2680: Disallow POST requests to /dcim/interface-connections/ API endpoint --- CHANGELOG.md | 1 + netbox/dcim/api/views.py | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 1f202fd34..c101eb96d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,7 @@ v2.5.1 (FUTURE) * [#2666](https://github.com/digitalocean/netbox/issues/2666) - Correct display of length unit in cables list * [#2676](https://github.com/digitalocean/netbox/issues/2676) - Fix exception when passing dictionary value to a ChoiceField +* [#2680](https://github.com/digitalocean/netbox/issues/2680) - Disallow POST requests to `/dcim/interface-connections/` API endpoint --- diff --git a/netbox/dcim/api/views.py b/netbox/dcim/api/views.py index 2c0032cb4..7e0179171 100644 --- a/netbox/dcim/api/views.py +++ b/netbox/dcim/api/views.py @@ -484,7 +484,7 @@ class PowerConnectionViewSet(ListModelMixin, GenericViewSet): filterset_class = filters.PowerConnectionFilter -class InterfaceConnectionViewSet(ModelViewSet): +class InterfaceConnectionViewSet(ListModelMixin, GenericViewSet): queryset = Interface.objects.select_related( 'device', '_connected_interface', '_connected_circuittermination' ).filter(