document and files and folders: Add missing CSRF checks, add missing permission checks

2026-03-11 00:04:50 +00:00 · 2026-03-02 20:49:35 -05:00
parent 6bbe887f8b
commit 90171064a8
22 changed files with 101 additions and 19 deletions
--- a/agent/modals/file/file_link_asset.php
+++ b/agent/modals/file/file_link_asset.php
@@ -8,6 +8,7 @@
                </button>
            </div>
            <form action="post.php" method="post" autocomplete="off">
+                <input type="hidden" name="csrf_token" value="<?= $_SESSION['csrf_token'] ?>">
                <input type="hidden" name="file_id" value="<?php echo $file_id; ?>">
                <div class="modal-body">