Skip to content
Snippets Groups Projects
Commit c91dc360 authored by JediKev's avatar JediKev Committed by Peter Rotich
Browse files

issue: CSRF In users.inc.php URL

This addresses an issue where the CSRF Token is displayed in the URL
when you preform a search in the Users Tab. This removes the token from the
request which removes it from the URL.
parent a3e73839
No related branches found
No related tags found
No related merge requests found
...@@ -312,6 +312,11 @@ $(function() { ...@@ -312,6 +312,11 @@ $(function() {
goBaby($(this).attr('href').substr(1)); goBaby($(this).attr('href').substr(1));
return false; return false;
}); });
// Remove CSRF Token From GET Request
document.querySelector("form[action='users.php']").onsubmit = function() {
document.getElementsByName("__CSRFToken__")[0].remove();
};
}); });
</script> </script>
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment