From 0ad0164fe5a18223766bf5cc92b7c03e3ebe4b02 Mon Sep 17 00:00:00 2001 From: Ner'zhul Date: Wed, 19 Nov 2014 10:48:36 +0100 Subject: [PATCH] Fix CSRF problem on push function CSRF is not needed on push because user is not calling other pages. This will fix issues https://github.com/nerzhul/ocsms/issues/25 and https://github.com/nerzhul/ownCloud-SMS-App/issues/8 --- controller/smscontroller.php | 1 + 1 file changed, 1 insertion(+) diff --git a/controller/smscontroller.php b/controller/smscontroller.php index 87f8a63..f2967ea 100644 --- a/controller/smscontroller.php +++ b/controller/smscontroller.php @@ -204,6 +204,7 @@ class SmsController extends Controller { /** * @NoAdminRequired + * @NoCSRFRequired */ public function push ($smsCount, $smsDatas) { if ($this->checkPushStructure($smsCount, $smsDatas, true) === false) {