Merge pull request #370 from mateusz/csrf_message

MINOR: change the ugly user-facing CSRF message to more friendly
This commit is contained in:
Ingo Schommer 2012-04-26 02:19:34 -07:00
commit 7483970f68

View File

@ -240,7 +240,7 @@ class Form extends RequestHandler {
// Protection against CSRF attacks
$token = $this->getSecurityToken();
if(!$token->checkRequest($request)) {
$this->httpError(400, "Security token doesn't match, possible CSRF attack.");
$this->httpError(400, "Sorry, your session has timed out.");
}
// Determine the action button clicked