Add missing CSRF checks

2021-06-05 14:33:19 -07:00
parent 41102ec161
commit 71123b0f37
23 changed files with 58 additions and 17 deletions
--- a/app/Controller/BoardAjaxController.php
+++ b/app/Controller/BoardAjaxController.php
@@ -21,6 +21,7 @@ class BoardAjaxController extends BaseController
     */
    public function save()
    {
+        $this->checkReusableGETCSRFParam();
        $project_id = $this->request->getIntegerParam('project_id');

        if (! $project_id || ! $this->request->isAjax()) {