diff options
| author | robocoder <anthon.pang@gmail.com> | 2010-08-01 10:11:52 +0400 |
|---|---|---|
| committer | robocoder <anthon.pang@gmail.com> | 2010-08-01 10:11:52 +0400 |
| commit | 603c21d558a4b30c81c0598fb0bc1807349a3908 (patch) | |
| tree | 7056c66267f7862f1a4e734e84cf2f177a6d2ddf /core/Nonce.php | |
| parent | a52735dadee9224341afe82f74ea70863cff0fd7 (diff) | |
fixes #1541
git-svn-id: http://dev.piwik.org/svn/trunk@2839 59fd770c-687e-43c8-a1e3-f5a4ff64c105
Diffstat (limited to 'core/Nonce.php')
| -rw-r--r-- | core/Nonce.php | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/core/Nonce.php b/core/Nonce.php index 632ed55b07..4535fd63c1 100644 --- a/core/Nonce.php +++ b/core/Nonce.php @@ -76,6 +76,15 @@ class Piwik_Nonce return false; } + // validate origin + $origin = Piwik_Url::getOrigin(); + if(!empty($origin) && + ($origin == 'null' + || !in_array($origin, Piwik_Url::getLocalOrigins()))) + { + return false; + } + return true; } } |