mirror of
https://git.tt-rss.org/git/tt-rss.git
synced 2025-12-13 13:45:56 +00:00
- enable CSRF support earlier
- remove rpc/sanityCheck from CSRF-excluded calls
This commit is contained in:
@@ -2,7 +2,7 @@
|
||||
class RPC extends Handler_Protected {
|
||||
|
||||
function csrf_ignore($method) {
|
||||
$csrf_ignored = array("sanitycheck", "completelabels", "saveprofile");
|
||||
$csrf_ignored = array("completelabels", "saveprofile");
|
||||
|
||||
return array_search($method, $csrf_ignored) !== false;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user