CSRF Token + small fixes

2020-06-14 19:39:52 +02:00
parent 8fc0b4bb05
commit f87fdc83ae
17 changed files with 83 additions and 16 deletions
--- a/core/Api/Notifications/Create.class.php
+++ b/core/Api/Notifications/Create.class.php
@@ -17,6 +17,7 @@ class Create extends Request {
      'message' =>  new StringType('message', 256),
    ));
    $this->isPublic = false;
+    $this->csrfTokenRequired = true;
  }

  private function checkUser($userId) {