upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-06-10 17:23:59 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 57

feat: Add generate session token to CsrfTokenManager

Browse source 
Signed-off-by: Carl Schwan <carlschwan@kde.org>
This commit is contained in:
Carl Schwan 2026-05-05 14:54:41 +02:00 committed by Ferdinand Thiessen
parent c5c3525a6e
commit e21b7d1121
3 changed files with 5 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
lib/private/AppFramework/Middleware/Security/SecurityMiddleware.php
View file

@ -196,7 +196,7 @@ class SecurityMiddleware extends Middleware {
}
}
// CSRF check - also registers the CSRF token since the session may be closed later
Server::get(CsrfTokenManager::class)->getToken()->getEncryptedValue();
Server::get(CsrfTokenManager::class)->generateSessionToken();
if ($this->isInvalidCSRFRequired($reflectionMethod)) {
/*
* Only allow the CSRF check to fail on OCS Requests. This kind of

4
lib/private/Security/CSRF/CsrfTokenManager.php
View file

@ -74,4 +74,8 @@ class CsrfTokenManager {
$token->getDecryptedValue()
);
}
public function generateSessionToken(): void {
$this->getToken();
}
}

1
lib/public/Util.php
View file

@ -449,7 +449,6 @@ class Util {
return htmlspecialchars((string)$value, ENT_QUOTES, 'UTF-8');
}, $value);
}
// Specify encoding for PHP<5.4
return htmlspecialchars((string)$value, ENT_QUOTES, 'UTF-8');
}