jjsm01/kimai2
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

use token in invoice delete route (#2889)

Browse Source
This commit is contained in:
Kevin Papst
2021-10-30 15:17:06 +02:00
committed by GitHub
parent 40061e43bb
commit 1d32e4ecee
5 changed files with 19 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/EventSubscriber/Actions/InvoiceSubscriber.php
View File

@@ -37,6 +37,6 @@ class InvoiceSubscriber extends AbstractActionsSubscriber
}
$event->addAction('download', ['url' => $this->path('admin_invoice_download', ['id' => $invoice->getId()]), 'target' => '_blank']);
$event->addDelete($this->path('admin_invoice_delete', ['id' => $invoice->getId()]), false);
$event->addDelete($this->path('admin_invoice_delete', ['id' => $invoice->getId(), 'token' => $payload['token']]), false);
}
}