Feeling Lucky
J4 Issue
?
[#20642] - [4.0] Check Session token in header
- Closed
- 17 Jun 2018
- Medium
- Build: staging
- # 20642
Steps to reproduce the issue
Was there a reason to remove this check from checkToken() in Session.php?
if ($token === $app->input->server->get('HTTP_X_CSRF_TOKEN', '', 'alnum'))
{
return true;
}
It's still handled and set in core.js - function Joomla.request
One of them is a bug.
joomla-cms-bot
- | Labels |
Added:
?
|
||
| Category | ⇒ | Authentication |
brianteeman
- | Labels |
Added:
J4 Issue
|
||
| Status | New | ⇒ | Information Required |
mbabker
- comment
- 12 Jun 2018
Probably lost in a merge conflict, not intentionally removed.
TBH, it's time to deprecate the static methods in the CMS Session class and we should look at how to transition to the application's checkToken method.
| Status | Information Required | ⇒ | Discussion |
| Status | Discussion | ⇒ | Closed |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2018-06-17 21:50:07 |
| Closed_By | ⇒ | brianteeman |
Can an more experienced User than me please answer as this Issue is set on "New" since 11 Days?
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/20642.