IntenseFinance/firefly-iii
3
0
Fork 0
mirror of https://github.com/firefly-iii/firefly-iii.git synced 2025-02-25 18:45:27 -06:00
Code Issues Packages Projects Releases Wiki Activity

Fix unsecure redirect code.

Browse Source
This commit is contained in:
James Cole
2021-10-02 13:28:56 +02:00
parent 4e84a5c40c
commit 8662dfa4c0
3 changed files with 58 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
app/Http/Middleware/StartFireflySession.php
View File

@@ -45,7 +45,6 @@ class StartFireflySession extends StartSession
$url = $request->fullUrl();
$forbiddenWords = strpos($url, 'offline') || strpos($url, 'jscript') || strpos($url, 'delete') || strpos($url, '/login') || strpos($url, '/json') || strpos($url, 'serviceworker') || strpos($url, '/attachments/view');
// also stop remembering "delete" URL's.
if (false === $forbiddenWords
&& 'GET' === $request->method()
&& !$request->ajax()) {