albertito / chasquid / 37222720792

95%

main: 95%

push

monitoring: Use method-based routing and CSRF for http requests

The monitoring http server is mostly read-only but shows sensitive data,
and also has one mutating endpoint, /exit.

This patch updates the routing to use method-based routing, and also
wraps it on CSRF to reject cross-origin requests from browsers.

Note that does not affect direct POST /exit requests via tools like
curl or wget, which continue to work just like today. This is exercised
in the (unchanged) integration tests.

16 of 18 new or added lines in 2 files covered. (88.89%)

4899 of 5177 relevant lines covered (94.63%)

64722.73 hits per line