summaryrefslogtreecommitdiff
path: root/app/Controller/BaseController.php
diff options
context:
space:
mode:
Diffstat (limited to 'app/Controller/BaseController.php')
-rw-r--r--app/Controller/BaseController.php7
1 files changed, 7 insertions, 0 deletions
diff --git a/app/Controller/BaseController.php b/app/Controller/BaseController.php
index 43ecfaab..1433ec14 100644
--- a/app/Controller/BaseController.php
+++ b/app/Controller/BaseController.php
@@ -26,6 +26,13 @@ abstract class BaseController extends Base
}
}
+ protected function checkReusableCSRFParam()
+ {
+ if (! $this->token->validateReusableCSRFToken($this->request->getRawValue('csrf_token'))) {
+ throw new AccessForbiddenException();
+ }
+ }
+
/**
* Check webhook token
*