public/tt-rss
1
0
Fork 0
mirror of https://git.tt-rss.org/git/tt-rss.git synced 2025-12-15 18:25:55 +00:00
Code Issues Releases Wiki Activity

pass CSRF token to opml import and feed icon replace dialogs

Browse Source
This commit is contained in:
Andrew Dolgov
2020-09-16 06:43:55 +03:00
parent f693ebab21
commit 33fdde249e
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
classes/pref/feeds.php
View File

@@ -772,6 +772,7 @@ class Pref_Feeds extends Handler_Protected {
<input style='display: none' id='icon_file' size='10' name='icon_file' type='file'> <input style='display: none' id='icon_file' size='10' name='icon_file' type='file'>
</label> </label>
<input type='hidden' name='op' value='pref-feeds'> <input type='hidden' name='op' value='pref-feeds'>
<input type='hidden' name='csrf_token' value='".$_SESSION['csrf_token']."'>
<input type='hidden' name='feed_id' value='$feed_id'> <input type='hidden' name='feed_id' value='$feed_id'>
<input type='hidden' name='method' value='uploadicon'> <input type='hidden' name='method' value='uploadicon'>
<button dojoType='dijit.form.Button' onclick=\"return CommonDialogs.uploadFeedIcon();\" <button dojoType='dijit.form.Button' onclick=\"return CommonDialogs.uploadFeedIcon();\"
@@ -1325,6 +1326,7 @@ class Pref_Feeds extends Handler_Protected {
<input style='display : none' id='opml_file' name='opml_file' type='file'>&nbsp; <input style='display : none' id='opml_file' name='opml_file' type='file'>&nbsp;
</label> </label>
<input type='hidden' name='op' value='dlg'> <input type='hidden' name='op' value='dlg'>
<input type='hidden' name='csrf_token' value='".$_SESSION['csrf_token']."'>
<input type='hidden' name='method' value='importOpml'> <input type='hidden' name='method' value='importOpml'>
<button dojoType='dijit.form.Button' class='alt-primary' onclick=\"return Helpers.OPML.import();\" type=\"submit\">" . <button dojoType='dijit.form.Button' class='alt-primary' onclick=\"return Helpers.OPML.import();\" type=\"submit\">" .
__('Import OPML') . "</button>"; __('Import OPML') . "</button>";