Add CSRF check)

pkp · Oct 3, 2023 · c587c38 · c587c38
1 parent e8117dc
commit c587c38
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/controllers/grid/StaticPageGridHandler.inc.php b/controllers/grid/StaticPageGridHandler.inc.php
@@ -192,6 +192,8 @@ function updateStaticPage($args, $request) {
 	 * @return string Serialized JSON object
 	 */
 	function delete($args, $request) {
+		if (!$request->checkCSRF()) return new JSONMessage(false);
+
 		$staticPageId = $request->getUserVar('staticPageId');
 		$context = $request->getContext();