amorfo77/sogo
1
0
Fork 0
mirror of https://github.com/inverse-inc/sogo.git synced 2026-07-05 16:35:10 +00:00
Code Issues Projects Releases Wiki Activity

Fix folder export when XSRF validation is enabled

Browse Source 
Fixes #4502
This commit is contained in:
Francis Lachapelle
2018-11-23 14:20:33 -05:00
parent bcdbc01dc0
commit 237ac4a330
8 changed files with 28 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
UI/SOGoUI/SOGoDirectAction.m
+5 -1
View File
@@ -253,8 +253,12 @@ static SoProduct *commonProduct = nil;
![auth isKindOfClass: [SOGoWebAuthenticator class]])
return [super performActionNamed: _actionName];
// We grab the X-XSRF-TOKEN header
// We grab the X-XSRF-TOKEN from the header or the URL
token = [[context request] headerForKey: @"X-XSRF-TOKEN"];
if (![token length])
{
token = [[context request] formValueForKey: @"X-XSRF-TOKEN"];
}
// We compare it with our session key
value = [[context request]