Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Include non-OCS routes with CSRF protection #179

Closed
provokateurin opened this issue Nov 6, 2024 · 0 comments · Fixed by #181
Closed

Include non-OCS routes with CSRF protection #179

provokateurin opened this issue Nov 6, 2024 · 0 comments · Fixed by #181
Labels
enhancement New feature or request

Comments

@provokateurin
Copy link
Member

Since nextcloud/server#46760 we can use the same OCS-APIRequest header that we already use for OCS to be able to pass the CSRF checks.
Now we can also include those routes in the output.
It's a bit annoying that this then will depend on the used Nextcloud versions, but adding checks if the lowest supported server version is >=31 is a bit too much work.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant