Browse Source

Remove dead code

tags/v8.0.0alpha1
Lukas Reschke 9 years ago
parent
commit
41374986d3
2 changed files with 0 additions and 18 deletions
  1. 0
    1
      lib/private/appframework/http/request.php
  2. 0
    17
      lib/private/util.php

+ 0
- 1
lib/private/appframework/http/request.php View File

@@ -350,7 +350,6 @@ class Request implements \ArrayAccess, \Countable, IRequest {
/**
* Checks if the CSRF check was correct
* @return bool true if CSRF check passed
* @see OC_Util::$callLifespan
* @see OC_Util::callRegister()
*/
public function passesCSRFCheck() {

+ 0
- 17
lib/private/util.php View File

@@ -896,29 +896,14 @@ class OC_Util {
return $id;
}

/**
* Static lifespan (in seconds) when a request token expires.
*
* @see OC_Util::callRegister()
* @see OC_Util::isCallRegistered()
* @description
* Also required for the client side to compute the point in time when to
* request a fresh token. The client will do so when nearly 97% of the
* time span coded here has expired.
*/
public static $callLifespan = 3600; // 3600 secs = 1 hour

/**
* Register an get/post call. Important to prevent CSRF attacks.
*
* @todo Write howto: CSRF protection guide
* @return string Generated token.
* @description
* Creates a 'request token' (random) and stores it inside the session.
* Ever subsequent (ajax) request must use such a valid token to succeed,
* otherwise the request will be denied as a protection against CSRF.
* The tokens expire after a fixed lifespan.
* @see OC_Util::$callLifespan
* @see OC_Util::isCallRegistered()
*/
public static function callRegister() {
@@ -938,7 +923,6 @@ class OC_Util {
* Check an ajax get/post call if the request token is valid.
*
* @return boolean False if request token is not set or is invalid.
* @see OC_Util::$callLifespan
* @see OC_Util::callRegister()
*/
public static function isCallRegistered() {
@@ -948,7 +932,6 @@ class OC_Util {
/**
* Check an ajax get/post call if the request token is valid. Exit if not.
*
* @todo Write howto
* @return void
*/
public static function callCheck() {

Loading…
Cancel
Save