Sutty/trabajo-afectivo
5
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Maintenance: authentication_check Controller callback runs after CSRF token check which leads to failing POST/PUT, non-Session authenticated requests.

Browse source
This commit is contained in:
Thorsten Eckel 2019-12-02 14:17:57 +01:00
parent 47778f2d2f
commit 96d300b912
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
app/controllers/knowledge_base/base_controller.rb
View file

@ -1,7 +1,7 @@
# Copyright (C) 2012-2017 Zammad Foundation, http://zammad-foundation.org/ # Copyright (C) 2012-2017 Zammad Foundation, http://zammad-foundation.org/
class KnowledgeBase::BaseController < ApplicationController class KnowledgeBase::BaseController < ApplicationController
before_action :authentication_check prepend_before_action :authentication_check
before_action :ensure_editor_or_reader before_action :ensure_editor_or_reader
before_action :ensure_editor, only: %i[create update destroy] before_action :ensure_editor, only: %i[create update destroy]