|
Lines 74-80
sub call {
Link Here
|
| 74 |
# Get the CSRF token from the param list or the header |
74 |
# Get the CSRF token from the param list or the header |
| 75 |
my $csrf_token = $req->param('csrf_token') || $req->header('CSRF-TOKEN'); |
75 |
my $csrf_token = $req->param('csrf_token') || $req->header('CSRF-TOKEN'); |
| 76 |
|
76 |
|
| 77 |
if ( defined $req->param('op') && $original_op !~ m{^cud-} ) { |
77 |
if ( ( defined $req->param('op') && $original_op !~ m{^cud-} ) && !$req->param('login_op') ) { |
| 78 |
$error = sprintf "Programming error - op '%s' must start with 'cud-' for %s %s (referer: %s)", $original_op, |
78 |
$error = sprintf "Programming error - op '%s' must start with 'cud-' for %s %s (referer: %s)", $original_op, |
| 79 |
$request_method, $uri, $referer; |
79 |
$request_method, $uri, $referer; |
| 80 |
} elsif ( defined $req->param('login_op') && $req->param('login_op') !~ m/^cud-login$/ ) { |
80 |
} elsif ( defined $req->param('login_op') && $req->param('login_op') !~ m/^cud-login$/ ) { |
| 81 |
- |
|
|