Add CSRF check for task and project files upload

2018-01-29 15:56:30 -08:00
parent 90984d6bb9
commit 9ddefa979a
13 changed files with 71 additions and 13 deletions
--- a/app/Template/task_file/create.php
+++ b/app/Template/task_file/create.php
@@ -3,6 +3,7 @@
 </div>

 <?= $this->app->component('file-upload', array(
+    'csrf'              => $this->app->getToken()->getReusableCSRFToken(),
    'maxSize'           => $max_size,
    'url'               => $this->url->to('TaskFileController', 'save', array('task_id' => $task['id'], 'project_id' => $task['project_id'])),
    'labelDropzone'     => t('Drag and drop your files here'),