Add CSRF check for task and project files upload

2018-01-29 15:56:30 -08:00
parent 90984d6bb9
commit 9ddefa979a
13 changed files with 71 additions and 13 deletions
--- a/app/Controller/ProjectFileController.php
+++ b/app/Controller/ProjectFileController.php
@@ -32,6 +32,7 @@ class ProjectFileController extends BaseController
     */
    public function save()
    {
+        $this->checkReusableCSRFParam();
        $project = $this->getProject();
        $result = $this->projectFileModel->uploadFiles($project['id'], $this->request->getFileInfo('files'));