valvin
/
ttrss
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

remove customizecss from csrf-ignored methods

This commit is contained in:
Andrew Dolgov 2021-02-12 10:37:14 +03:00
parent bf6d0f2817
commit 20fb056323
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
classes/pref/prefs.php
View File

@ -8,7 +8,7 @@ class Pref_Prefs extends Handler_Protected {
private $profile_blacklist = [];
function csrf_ignore($method) {
$csrf_ignored = array("index", "updateself", "customizecss", "editprefprofiles", "otpqrcode");
$csrf_ignored = array("index", "updateself", "editprefprofiles", "otpqrcode");
return array_search($method, $csrf_ignored) !== false;
}