refs #7104 directly close session again to prevent any blocking when ajax requests are made within widget or when sparklines are requested

1 files changed, 12 insertions, 0 deletions

diff --git a/core/FrontController.php b/core/FrontController.php
index dd1d44a856..26ce67a6e4 100644
--- a/core/FrontController.php
+++ b/core/FrontController.php
@@ -466,6 +466,18 @@ class FrontController extends Singleton
             && ($module !== 'API' || ($action && $action !== 'index'))
         ) {
             Session::start();
+
+            if (!empty($_SERVER['HTTP_REFERER'])
+                && !empty($POST['token_auth'])
+                && strpos($_SERVER['HTTP_REFERER'], 'module=CoreHome&action=index') !== false
+                && Common::getRequestVar('widget', 0, 'int') === 1) {
+                Session::close();
+            }
+
+            if (!empty($_SERVER['HTTP_REFERER'])
+                && Common::getRequestVar('viewDataTable', '', 'string') === 'sparkline') {
+                Session::close();
+            }
         }
 
         if (is_null($parameters)) {