Merge branch 'security-stable-1.625' into security-master

core/src/main/java/hudson/PluginManager.java

@@ -875,6 +875,7 @@ public abstract class PluginManager extends AbstractModelObject implements OnMas
     /**
      * Bare-minimum configuration mechanism to change the update center.
      */
+    @RequirePOST
     public HttpResponse doSiteConfigure(@QueryParameter String site) throws IOException {
         Jenkins hudson = Jenkins.getInstance();
         hudson.checkPermission(CONFIGURE_UPDATECENTER);
@@ -890,6 +891,7 @@ public abstract class PluginManager extends AbstractModelObject implements OnMas
     }
 
 
+    @RequirePOST
     public HttpResponse doProxyConfigure(StaplerRequest req) throws IOException, ServletException {
         Jenkins jenkins = Jenkins.getInstance();
         jenkins.checkPermission(CONFIGURE_UPDATECENTER);
@@ -908,6 +910,7 @@ public abstract class PluginManager extends AbstractModelObject implements OnMas
     /**
      * Uploads a plugin.
      */
+    @RequirePOST
     public HttpResponse doUploadPlugin(StaplerRequest req) throws IOException, ServletException {
         try {
             Jenkins.getInstance().checkPermission(UPLOAD_PLUGINS);