Skip to content

O
OpnSense
Commit 43955298 authored by Ad Schellevis's avatar Ad Schellevis
Browse files
Options

(mvc) fix Phalcon csrf issue after upgrade >= 2.0.1

parent e4cd84cb
Show whitespace changes
Inline Side-by-side
Showing with 1 addition and 1 deletion
src/opnsense/mvc/app/controllers/OPNsense/Base/ApiControllerBase.php
View file @ 43955298
...@@ -97,7 +97,7 @@ class ApiControllerBase extends Controller ...@@ -97,7 +97,7 @@ class ApiControllerBase extends Controller
// check for valid csrf on post requests // check for valid csrf on post requests
$csrf_tokenkey = $this->request->getHeader('X_CSRFTOKENKEY'); $csrf_tokenkey = $this->request->getHeader('X_CSRFTOKENKEY');
$csrf_token = $this->request->getHeader('X_CSRFTOKEN'); $csrf_token = $this->request->getHeader('X_CSRFTOKEN');
$csrf_valid = $this->security->checkToken($csrf_tokenkey, $csrf_token); $csrf_valid = $this->security->checkToken($csrf_tokenkey, $csrf_token, false);
if (($this->request->isPost() || if (($this->request->isPost() ||
$this->request->isPut() || $this->request->isPut() ||
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment

Technounit-GROUP 2023