Add missing CSRF checks

2021-06-05 14:33:19 -07:00
parent 41102ec161
commit 71123b0f37
23 changed files with 58 additions and 17 deletions
--- a/app/Controller/SubtaskStatusController.php
+++ b/app/Controller/SubtaskStatusController.php
@@ -17,6 +17,7 @@ class SubtaskStatusController extends BaseController
     */
    public function change()
    {
+        $this->checkReusableGETCSRFParam();
        $task = $this->getTask();
        $subtask = $this->getSubtask($task);
        $fragment = $this->request->getStringParam('fragment');