diff options
author | Andrew Dolgov <[email protected]> | 2021-02-18 11:54:29 +0300 |
---|---|---|
committer | Andrew Dolgov <[email protected]> | 2021-02-18 11:54:29 +0300 |
commit | 466cba39d86487ce3c81d7aeade96e9f9e4a119d (patch) | |
tree | 2e21056edf73e853319a05aa25b038c078c4cfd1 /classes/pluginhandler.php | |
parent | 1adb9bb6b643736706b746629b849df9cdf45e50 (diff) | |
parent | b888bc2091c6737846f54a729ee047e4693fd8e3 (diff) |
Merge branch 'master' of git.fakecake.org:fox/tt-rss
Diffstat (limited to 'classes/pluginhandler.php')
-rw-r--r-- | classes/pluginhandler.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/classes/pluginhandler.php b/classes/pluginhandler.php index a0e60b4e6..608f80dcb 100644 --- a/classes/pluginhandler.php +++ b/classes/pluginhandler.php @@ -11,7 +11,7 @@ class PluginHandler extends Handler_Protected { if ($plugin) { if (method_exists($plugin, $method)) { - if (validate_csrf($csrf_token)) { + if (validate_csrf($csrf_token) || $plugin->csrf_ignore($method)) { $plugin->$method(); } else { user_error("Rejected ${plugin_name}->${method}(): invalid CSRF token.", E_USER_WARNING); |