GNUsocial
/
gnu-social
4
0
Fork 1
Code Issues Releases Wiki Activity

IMPORTANT: parent::handlePost() in NewnoticeAction 

otherwise we don't do csrf checking etc...
This commit is contained in:
Mikael Nordfeldth 2013-09-01 21:45:10 +02:00
parent 0612e5ec87
commit 89b10666bb
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
actions/newnotice.php
View File

@ -101,6 +101,8 @@ class NewnoticeAction extends FormAction
*/
protected function handlePost()
{
parent::handlePost();
assert($this->scoped); // XXX: maybe an error instead...
$user = $this->scoped->getUser();
$content = $this->trimmed('status_textarea');