mirror of
https://github.com/nextcloud/all-in-one.git
synced 2026-07-22 22:20:00 +00:00
The GET /api/docker/getwatchtower route triggered a state-changing action (starting the watchtower container) without CSRF protection. This endpoint is removed since the POST /api/docker/watchtower route already exists and is properly protected by the CSRF Guard middleware. Assisted-by: GitHub Copilot:claude-sonnet-4-6