Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bug found on issues : XSRF token reading #405

Closed
bestkiller92 opened this issue Jan 26, 2022 · 1 comment
Closed

Bug found on issues : XSRF token reading #405

bestkiller92 opened this issue Jan 26, 2022 · 1 comment
Labels

Comments

@bestkiller92
Copy link

phproject/app/controller/issues.php
public function reopen($f3, $params)
{
$this->validateCsrf(); >> issue is comming from this line :

phproject/app/helper/security.php -->
$cookieToken = $f3->get('COOKIE.XSRF-TOKEN');
$requestToken = $f3->get('POST.csrf-token');

When clicking on "reopen" there is no "POST" data, therefore the error 400 is triggered
I didn't find any solution for now.
Workaround : comment the $this->validateCsrf(); line

Alanaktion added a commit that referenced this issue Jan 27, 2022
@Alanaktion Alanaktion added the bug label Jan 27, 2022
@Alanaktion
Copy link
Owner

This is fixed in v1.7.12

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants