Add CSRF Checks on Agent ajax endpoints that would update / delete or add something to the db

2026-03-13 17:24:51 +00:00 · 2026-03-05 17:12:44 -05:00
parent 994526e2c8
commit a81edc122d
13 changed files with 41 additions and 3 deletions
--- a/agent/modals/asset/asset_details.php
+++ b/agent/modals/asset/asset_details.php
@@ -408,6 +408,7 @@ ob_start();
                    "ajax.php",
                    {
                        asset_set_notes: 'TRUE',
+                        csrf_token: '<?= $_SESSION['csrf_token'] ?>',
                        asset_id: asset_id,
                        notes: notes
                    }