Merge pull request #181 from pdsinterop/fix/CLN-005

Fix CWE-650 (Trusting HTTP Permission Methods on the Server Side) on the /revoke endpoint

Author: ylebre

solid/appinfo/routes.php

@@ -11,7 +11,9 @@
     'routes' => [
         ['name' => 'page#profile', 'url' => '/@{userId}/', 'verb' => 'GET'],
         ['name' => 'page#approval', 'url' => '/sharing/{clientId}', 'verb' => 'GET'],
-        ['name' => 'page#handleRevoke', 'url' => '/revoke/{clientId}', 'verb' => 'GET'],
+        ['name' => 'page#handleRevoke', 'url' => '/revoke/{clientId}', 'verb' => 'DELETE'],
+        ['name' => 'page#handleRevoke', 'url' => '/revoke/{clientId}', 'verb' => 'POST'],
+
         ['name' => 'page#handleApproval', 'url' => '/sharing/{clientId}', 'verb' => 'POST'],
         ['name' => 'page#dataJson', 'url' => '/@{userId}/data.json', 'verb' => 'GET' ],
         ['name' => 'page#customscheme', 'url' => '/customscheme', 'verb' => 'GET'],