Dereku/snappymail
1
0
Fork 0
mirror of https://github.com/the-djmaze/snappymail.git synced 2026-07-13 03:27:39 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

Delete JsError action

Browse source
This commit is contained in:
RainLoop Team 2019-08-01 03:13:44 +03:00
parent 66b23747c7
commit 1b2306c7b0
4 changed files with 1 additions and 106 deletions
Download patch file Download diff file Expand all files Collapse all files

2
rainloop/v/0.0.0/app/libraries/RainLoop/ServiceActions.php
View file

@ -126,7 +126,7 @@ class ServiceActions
try
{
if ($this->oHttp->IsPost() && !in_array($sAction, array('JsInfo', 'JsError')) &&
if ($this->oHttp->IsPost() &&
$this->Config()->Get('security', 'csrf_protection', false) &&
$this->oHttp->GetPost('XToken', '') !== \RainLoop\Utils::GetCsrfToken())
{