Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/nextcloud/server.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
path: root/core
diff options
context:
space:
mode:
authorMorris Jobke <hey@morrisjobke.de>2016-06-15 13:37:39 +0300
committerGitHub <noreply@github.com>2016-06-15 13:37:39 +0300
commit7d3bc95fa69ea9a840c20ff0dab1e217d0597893 (patch)
tree2225c12b10984c1557466cf92c93a0f79c0fff53 /core
parent7a5093c43e1915046d299877f35b0f2822bc516c (diff)
parent6d559ff5cfd6ee8c9bde27cc21883e2bb33ba92d (diff)
Merge pull request #88 from nextcloud/add-strict-cookie-check-also-to-config-js
[stable9] Add strict config check to config.js
Diffstat (limited to 'core')
-rw-r--r--core/js/config.php4
1 files changed, 4 insertions, 0 deletions
diff --git a/core/js/config.php b/core/js/config.php
index 7f2d0517460..921f35b59db 100644
--- a/core/js/config.php
+++ b/core/js/config.php
@@ -32,6 +32,10 @@
*
*/
+if(!\OC::$server->getRequest()->passesStrictCookieCheck()) {
+ die();
+}
+
// Set the content type to Javascript
header("Content-type: text/javascript");