diff options
| author | Robin Appelman <icewind@owncloud.com> | 2012-07-22 16:36:09 +0200 |
|---|---|---|
| committer | Robin Appelman <icewind@owncloud.com> | 2012-07-22 16:37:49 +0200 |
| commit | b1010160b363223c1e1c1cc7137dfb8e9aa3ab5b (patch) | |
| tree | 708e1ea6d1f19c5d5b961a81fa9a28ef03e6c534 /lib/eventsource.php | |
| parent | a49c07cf88f5093ab9a5af15384296aa2acbcd6d (diff) | |
| download | nextcloud-server-b1010160b363223c1e1c1cc7137dfb8e9aa3ab5b.tar.gz nextcloud-server-b1010160b363223c1e1c1cc7137dfb8e9aa3ab5b.zip | |
CSRF protection for eventsource
Diffstat (limited to 'lib/eventsource.php')
| -rw-r--r-- | lib/eventsource.php | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/lib/eventsource.php b/lib/eventsource.php index 2a8c6b92902..95af2e471bc 100644 --- a/lib/eventsource.php +++ b/lib/eventsource.php @@ -42,6 +42,9 @@ class OC_EventSource{ }else{ header("Content-Type: text/event-stream"); } + if( !OC_Util::isCallRegistered()){ + exit(); + } flush(); } |