mbk-lab
/
nextcloud
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Added a missing CSRF check

This commit is contained in:
Lukas Reschke 2012-09-22 11:02:03 +02:00
parent 80aa44565b
commit ac79fe649c
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
core/ajax/share.php
View File

@ -21,6 +21,8 @@
require_once '../../lib/base.php'; require_once '../../lib/base.php';
OC_JSON::checkLoggedIn(); OC_JSON::checkLoggedIn();
OCP\JSON::callCheck();
if (isset($_POST['action']) && isset($_POST['itemType']) && isset($_POST['itemSource'])) { if (isset($_POST['action']) && isset($_POST['itemType']) && isset($_POST['itemSource'])) {
switch ($_POST['action']) { switch ($_POST['action']) {
case 'share': case 'share':