diff options
| author | Robin Appelman <icewind@owncloud.com> | 2012-07-22 16:36:09 +0200 |
|---|---|---|
| committer | Robin Appelman <icewind@owncloud.com> | 2012-07-22 16:37:49 +0200 |
| commit | b1010160b363223c1e1c1cc7137dfb8e9aa3ab5b (patch) | |
| tree | 708e1ea6d1f19c5d5b961a81fa9a28ef03e6c534 /apps | |
| parent | a49c07cf88f5093ab9a5af15384296aa2acbcd6d (diff) | |
| download | nextcloud-server-b1010160b363223c1e1c1cc7137dfb8e9aa3ab5b.tar.gz nextcloud-server-b1010160b363223c1e1c1cc7137dfb8e9aa3ab5b.zip | |
CSRF protection for eventsource
Diffstat (limited to 'apps')
| -rw-r--r-- | apps/files/ajax/newfile.php | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/apps/files/ajax/newfile.php b/apps/files/ajax/newfile.php index de054d9ce0c..cc9208ad08f 100644 --- a/apps/files/ajax/newfile.php +++ b/apps/files/ajax/newfile.php @@ -17,6 +17,8 @@ $source = isset( $_REQUEST['source'] ) ? stripslashes($_REQUEST['source']) : ''; if($source){ $eventSource=new OC_EventSource(); +}else{ + OC_JSON::callCheck(); } if($filename == '') { |