CSRF Token + small fixes

2020-06-14 19:39:52 +02:00
parent 8fc0b4bb05
commit f87fdc83ae
17 changed files with 83 additions and 16 deletions
--- a/core/Api/ApiKey/Create.class.php
+++ b/core/Api/ApiKey/Create.class.php
@@ -9,6 +9,7 @@ class Create extends Request {
  public function __construct($user, $externalCall = false) {
    parent::__construct($user, $externalCall, array());
    $this->apiKeyAllowed = false;
+    $this->csrfTokenRequired = true;
    $this->loginRequired = true;
  }