CSRF Token + small fixes

2020-06-14 19:39:52 +02:00
parent 8fc0b4bb05
commit f87fdc83ae
17 changed files with 83 additions and 16 deletions
--- a/core/Api/Notifications/Create.class.php
+++ b/core/Api/Notifications/Create.class.php
@@ -17,6 +17,7 @@ class Create extends Request {
      'message' =>  new StringType('message', 256),
    ));
    $this->isPublic = false;
+    $this->csrfTokenRequired = true;
  }

  private function checkUser($userId) {
--- a/core/Api/Notifications/Fetch.class.php
+++ b/core/Api/Notifications/Fetch.class.php
@@ -12,6 +12,7 @@ class Fetch extends Request {
  public function __construct($user, $externalCall = false) {
    parent::__construct($user, $externalCall, array());
    $this->loginRequired = true;
+    $this->csrfTokenRequired = true;
  }

  private function fetchUserNotifications() {