Added XSRF check

diff --git a/core/ajax/appconfig.php b/core/ajax/appconfig.php
index 84e0710c74a5c36b40e73d240221f4cd880befd1..bf749be3e30db95dadabc419f663974f6300cae9 100644 (file)
--- a/core/ajax/appconfig.php
+++ b/core/ajax/appconfig.php
@@ -7,6 +7,7 @@
 
 require_once ("../../lib/base.php");
 OC_Util::checkAdminUser();
+OCP\JSON::callCheck();
 
 $action=isset($_POST['action'])?$_POST['action']:$_GET['action'];
 $result=false;