From e3f9b94fd0f87d4c52414971c47bd5e710067f55 Mon Sep 17 00:00:00 2001
From: Bjarke Berg <mail@bergmania.dk>
Date: Thu, 7 May 2020 10:13:54 +0200
Subject: [PATCH] AB#6233 - Added HttpPost to ensure only posts are possible

---
 src/Umbraco.Web.Common/Install/InstallApiController.cs | 1 +
 src/Umbraco.Web.UI.NetCore/appsettings.json            | 4 ++--
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/Umbraco.Web.Common/Install/InstallApiController.cs b/src/Umbraco.Web.Common/Install/InstallApiController.cs
index c1b5d14674..d3c4159319 100644
--- a/src/Umbraco.Web.Common/Install/InstallApiController.cs
+++ b/src/Umbraco.Web.Common/Install/InstallApiController.cs
@@ -90,6 +90,7 @@ namespace Umbraco.Web.Common.Install
         /// <summary>
         ///     Installs.
         /// </summary>
+        [HttpPost]
         public async Task<InstallProgressResultModel> PostPerformInstall([FromBody] InstallInstructions installModel)
         {
             if (installModel == null) throw new ArgumentNullException(nameof(installModel));
diff --git a/src/Umbraco.Web.UI.NetCore/appsettings.json b/src/Umbraco.Web.UI.NetCore/appsettings.json
index decad1c27c..29be35e386 100644
--- a/src/Umbraco.Web.UI.NetCore/appsettings.json
+++ b/src/Umbraco.Web.UI.NetCore/appsettings.json
@@ -1,6 +1,6 @@
 {
   "ConnectionStrings": {
-    "umbracoDbDSN": "Server=(LocalDB)\\Umbraco;Database=NetCore2;Integrated Security=true"
+    "umbracoDbDSN": ""
   },
   "Logging": {
     "LogLevel": {
@@ -119,4 +119,4 @@
       }
     }
   }
-}
\ No newline at end of file
+}