public/tt-rss
1
0
Fork 0
mirror of https://git.tt-rss.org/git/tt-rss.git synced 2025-12-13 06:55:56 +00:00
Code Issues Releases Wiki Activity

Feeds: load quickaddfeed and search dialogs via XHR w/ CSRF protection

Browse Source
This commit is contained in:
Andrew Dolgov
2020-09-15 16:28:09 +03:00
parent 8080c525fd
commit cbcb10a272
3 changed files with 129 additions and 122 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
classes/feeds.php
View File

@@ -8,7 +8,7 @@ class Feeds extends Handler_Protected {
private $params;
function csrf_ignore($method) {
$csrf_ignored = array("index", "quickaddfeed", "search");
$csrf_ignored = array("index");
return array_search($method, $csrf_ignored) !== false;
}