mirror of
https://github.com/silverstripe/silverstripe-framework
synced 2024-10-22 12:05:37 +00:00
#1637 - CSRF attack prevention on clicking next on asset table field
git-svn-id: svn://svn.silverstripe.com/silverstripe/open/modules/sapphire/trunk@44500 467b73ca-7a2a-4603-9d3b-597d59a354a9
This commit is contained in:
parent
87010bc87c
commit
48a5a0e33c
@ -903,7 +903,7 @@ JS
|
||||
}
|
||||
|
||||
function BaseLink() {
|
||||
return $this->FormAction() . "&action_callfieldmethod&fieldName={$this->Name()}&ctf[ID]={$this->sourceID()}&methodName=ajax_refresh";
|
||||
return $this->FormAction() . "&action_callfieldmethod&fieldName={$this->Name()}&ctf[ID]={$this->sourceID()}&methodName=ajax_refresh&SecurityID=" . Session::get('SecurityID');
|
||||
}
|
||||
|
||||
/**
|
||||
@ -1122,4 +1122,4 @@ class TableListField_Item extends ViewableData {
|
||||
}
|
||||
}
|
||||
|
||||
?>
|
||||
?>
|
||||
|
Loading…
x
Reference in New Issue
Block a user