Add OAuth token exchange endpoint to 'sensitive' array; i.e.: use SSL if

available

1 files changed, 11 insertions, 1 deletions

diff --git a/lib/util.php b/lib/util.php
index 86380af28..d1c084e2e 100644
--- a/lib/util.php
+++ b/lib/util.php
@@ -1080,7 +1080,17 @@ function common_local_url($action, $args=null, $params=null, $fragment=null, $ad
 
 function common_is_sensitive($action)
 {
-    static $sensitive = array('login', 'register', 'passwordsettings', 'api');
+    static $sensitive = array(
+        'login',
+        'register',
+        'passwordsettings',
+        'api',
+        'ApiOauthRequestToken',
+        'ApiOauthAccessToken',
+        'ApiOauthAuthorize',
+        'showapplication',
+        'editapplication'
+    );
     $ssl = null;
 
     if (Event::handle('SensitiveAction', array($action, &$ssl))) {