From ecb8b55c5c01ca5cfbf23ef241536ef76c8f277d Mon Sep 17 00:00:00 2001 From: Joas Schilling Date: Mon, 24 Apr 2023 17:13:18 +0200 Subject: feat(security): Add PHP \Attribute for remaining security annotations Signed-off-by: Joas Schilling --- lib/public/AppFramework/ApiController.php | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'lib/public/AppFramework/ApiController.php') diff --git a/lib/public/AppFramework/ApiController.php b/lib/public/AppFramework/ApiController.php index 83dfaf93bc6..66c278e62d8 100644 --- a/lib/public/AppFramework/ApiController.php +++ b/lib/public/AppFramework/ApiController.php @@ -23,6 +23,8 @@ */ namespace OCP\AppFramework; +use OCP\AppFramework\Http\Attribute\NoCSRFRequired; +use OCP\AppFramework\Http\Attribute\PublicPage; use OCP\AppFramework\Http\Response; use OCP\IRequest; @@ -70,6 +72,8 @@ abstract class ApiController extends Controller { * @PublicPage * @since 7.0.0 */ + #[NoCSRFRequired] + #[PublicPage] public function preflightedCors() { if (isset($this->request->server['HTTP_ORIGIN'])) { $origin = $this->request->server['HTTP_ORIGIN']; -- cgit v1.2.3