From f812107813b09bcd007a738523912cd3950e0a0b Mon Sep 17 00:00:00 2001
From: Fabian Keil <fk@fabiankeil.de>
Date: Wed, 18 Apr 2007 16:51:09 +0000
Subject: [PATCH] Now that header parsing comes before crunching, hide-referrer
 has to be disabled for the CGI pages.

---
 default.action.master | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/default.action.master b/default.action.master
index 1a461d14..384a8051 100644
--- a/default.action.master
+++ b/default.action.master
@@ -9,7 +9,7 @@
 # 
 #  File        :  $Source: /cvsroot/ijbswa/current/default.action.master,v $
 # 
-#  $Id: default.action.master,v 1.72 2007/04/12 02:57:46 hal9 Exp $
+#  $Id: default.action.master,v 1.73 2007/04/13 22:45:40 hal9 Exp $
 #
 #  Requires    :  This version requires Privoxy v3.0.7 or later due to 
 #                 syntax changes.
@@ -1858,6 +1858,13 @@ www.skweezer.net/bloglines
 {+redirect{http://config.privoxy.org/}}
 .privoxy.org/config
 
+#MASTER# REMARKS: Privoxy's "unsafe" CGI pages check the referrer 
+#MASTER# REMARKS: to make sure the user reached them intentionally.
+#MASTER# REMARKS: If the referrer is blocked, CGI editing is impossible.
+{-hide-referrer}
+p.p/
+config.privoxy.org/
+
 #MASTER# REMARKS: Yahoo logout URLs need special treatment,
 #MASTER# REMARKS: the URL after "done=" is no fast-redirect. 2007-01-19 fk
 #MASTER# REMARKS: Reported in support request #1635354.
-- 
2.39.2