From 1cc1366eb3497830ed6916c092b856d9ccea5b3d Mon Sep 17 00:00:00 2001
From: Roeland Jago Douma <roeland@famdouma.nl>
Date: Wed, 13 Nov 2019 09:20:09 +0100
Subject: Require CSRF

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
---
 lib/Controller/AlbumsController.php | 2 --
 1 file changed, 2 deletions(-)

(limited to 'lib')

diff --git a/lib/Controller/AlbumsController.php b/lib/Controller/AlbumsController.php
index e57539bc..bb096ad2 100644
--- a/lib/Controller/AlbumsController.php
+++ b/lib/Controller/AlbumsController.php
@@ -50,7 +50,6 @@ class AlbumsController extends Controller {
 
 	/**
 	 * @NoAdminRequired
-	 * @NoCSRFRequired
 	 */
 	public function myAlbums(string $path = ''): JSONResponse {
 		return $this->generate($path, false);
@@ -58,7 +57,6 @@ class AlbumsController extends Controller {
 
 	/**
 	 * @NoAdminRequired
-	 * @NoCSRFRequired
 	 */
 	public function sharedAlbums(string $path = ''): JSONResponse {
 		return $this->generate($path, true);
-- 
cgit v1.2.3