Add missing CSRF check in TwoFactorController::deactivate()

2019-01-30 20:21:12 -08:00
parent ef1abecee4
commit 19ea9ed620
2 changed files with 9 additions and 1 deletions
--- a/app/Controller/TwoFactorController.php
+++ b/app/Controller/TwoFactorController.php
@@ -119,6 +119,7 @@ class TwoFactorController extends UserViewController
     */
    public function deactivate()
    {
+        $this->checkCSRFForm();
        $user = $this->getUser();
        $this->checkCurrentUser($user);