aboutsummaryrefslogtreecommitdiffstats
path: root/core
diff options
context:
space:
mode:
authorMarcel Klehr <mklehr@gmx.net>2024-05-10 06:55:15 +0200
committerMarcel Klehr <mklehr@gmx.net>2024-05-14 11:38:41 +0200
commitf3a88f04ecb19da81cb53fb95f92a673a6892310 (patch)
treefa596fea298bea3831af727fc65e1adcfc847f14 /core
parent19a0aaeb5e71a2431d347dc54b28aeaad4254c2c (diff)
downloadnextcloud-server-f3a88f04ecb19da81cb53fb95f92a673a6892310.tar.gz
nextcloud-server-f3a88f04ecb19da81cb53fb95f92a673a6892310.zip
fix(OCS-API): No csrf required for /tasks/taskId/file/fileId
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
Diffstat (limited to 'core')
-rw-r--r--core/Controller/TaskProcessingApiController.php1
1 files changed, 1 insertions, 0 deletions
diff --git a/core/Controller/TaskProcessingApiController.php b/core/Controller/TaskProcessingApiController.php
index 6c06d17cef0..c44764d83d5 100644
--- a/core/Controller/TaskProcessingApiController.php
+++ b/core/Controller/TaskProcessingApiController.php
@@ -237,6 +237,7 @@ class TaskProcessingApiController extends \OCP\AppFramework\OCSController {
* 404: Task or file not found
*/
#[NoAdminRequired]
+ #[Http\Attribute\NoCSRFRequired]
#[ApiRoute(verb: 'GET', url: '/tasks/{taskId}/file/{fileId}', root: '/taskprocessing')]
public function getFileContents(int $taskId, int $fileId): Http\DataDownloadResponse|DataResponse {
try {