CSRF Token + small fixes

2020-06-14 19:39:52 +02:00
parent 8fc0b4bb05
commit f87fdc83ae
17 changed files with 83 additions and 16 deletions
--- a/core/Api/User/Logout.class.php
+++ b/core/Api/User/Logout.class.php
@@ -10,6 +10,7 @@ class Logout extends Request {
    parent::__construct($user, $externalCall);
    $this->loginRequired = true;
    $this->apiKeyAllowed = false;
+    $this->csrfTokenRequired = true;
  }

  public function execute($values = array()) {