diff options
| author | Frédéric Guillot <fred@kanboard.net> | 2018-01-29 15:56:30 -0800 |
|---|---|---|
| committer | Frédéric Guillot <fred@kanboard.net> | 2018-01-29 15:56:30 -0800 |
| commit | 9ddefa979a12aff2334d6e7048e142cfdef5bb89 (patch) | |
| tree | 30416f103ba88c7bdf1039c9d40085a7a784ddc0 /app/Controller/TaskFileController.php | |
| parent | 90984d6bb9b3bd508e0ca7f8c0ee07d304679fb5 (diff) | |
Add CSRF check for task and project files upload
Diffstat (limited to 'app/Controller/TaskFileController.php')
| -rw-r--r-- | app/Controller/TaskFileController.php | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/app/Controller/TaskFileController.php b/app/Controller/TaskFileController.php index ff0c299e..4c489238 100644 --- a/app/Controller/TaskFileController.php +++ b/app/Controller/TaskFileController.php @@ -51,6 +51,7 @@ class TaskFileController extends BaseController */ public function save() { + $this->checkReusableCSRFParam(); $task = $this->getTask(); $result = $this->taskFileModel->uploadFiles($task['id'], $this->request->getFileInfo('files')); |