Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-11-01 11:35:55 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update csrf-sync to fallback to _csrf query param

Browse Source
This commit is contained in:
psibean
2023-02-01 23:13:18 +10:30
committed by Julian Lam
parent bb0397cbc8
commit f553da48e1
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
src/middleware/csrf.js
View File

@@ -6,6 +6,13 @@ const {
generateToken, generateToken,
csrfSynchronisedProtection, csrfSynchronisedProtection,
} = csrfSync({ } = csrfSync({
getTokenFromRequest: (req) => {
if (req.headers['x-csrf-token']) {
return req.headers['x-csrf-token'];
} else if (req.query) {
return req.query._csrf;
}
},
size: 64, size: 64,
}); });