Last modified: 2013-06-19 22:38:38 UTC
I noticed when reviewing Gerrit change #65557 that the ApiNovaInstance module in OpenStackManager does not require tokens. It looks like ApiNovaAddress should as well.
I think the special pages need them as well.
The special pages use HTMLForm, which handles CSRF protection.
Created attachment 12588 [details] Require tokens for api calls in OSM
Attached patch fixes the issue and is already deployed.
Comment on attachment 12588 [details] Require tokens for api calls in OSM Works, just needs parameter description.