worldcone/forgejo
2
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Send error message when CSRF token is missing (#13676)

Browse source
This commit is contained in:
Kevin Zúñiga 2020-11-23 02:56:04 -05:00 committed by GitHub
parent 2791cc139e
commit 247ab6a922
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
modules/context/api.go
View file

@ -169,7 +169,7 @@ func (ctx *APIContext) RequireCSRF() {
if len(headerToken) > 0 || len(formValueToken) > 0 { if len(headerToken) > 0 || len(formValueToken) > 0 {
csrf.Validate(ctx.Context.Context, ctx.csrf) csrf.Validate(ctx.Context.Context, ctx.csrf)
} else { } else {
ctx.Context.Error(401) ctx.Context.Error(401, "Missing CSRF token.")
} }
} }