mirror/php-flarum
1
0
Fork 0
mirror of https://github.com/flarum/core.git synced 2025-07-21 08:41:17 +02:00
Code Issues Releases Wiki Activity

Remove deprecated CSRF wildcard path match

Browse Source
This commit is contained in:
Alexander Skvortsov
2021-01-19 19:09:06 -05:00
parent fbdc36dfbd
commit c887093e67
3 changed files with 1 additions and 65 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
framework/core/src/Http/Middleware/CheckCsrfToken.php
View File

@@ -26,12 +26,8 @@ class CheckCsrfToken implements Middleware
public function process(Request $request, Handler $handler): Response
{
$path = $request->getAttribute('originalUri')->getPath();
foreach ($this->exemptRoutes as $exemptRoute) {
/**
* @deprecated path match should be removed in beta 16, only route name match should be supported.
*/
if ($exemptRoute === $request->getAttribute('routeName') || fnmatch($exemptRoute, $path)) {
if ($exemptRoute === $request->getAttribute('routeName')) {
return $handler->handle($request);
}
}