Merge pull request #81 from hiromi-mi/fix_csrf_authorize_follow

Add CSRF Protection in POST /authorize_follow
This commit is contained in:
Thomas Sileo
2020-06-04 08:08:16 +02:00
committed by GitHub

View File

@@ -639,6 +639,7 @@ def authorize_follow():
)
)
csrf.protect()
actor = get_actor_url(request.form.get("profile"))
if not actor:
abort(500)