Update CSRF Token IDs for Issue kevinpapst/kimai2#2947 (#2948)
* bump version * removed not needed token, as it is already contained in the form Co-authored-by: Kevin Papst <kpapst@gmx.net>
This commit is contained in:
@@ -265,7 +265,7 @@ final class InvoiceController extends AbstractController
|
||||
return $this->redirectToRoute('admin_invoice_list');
|
||||
}
|
||||
|
||||
$csrfTokenManager->refreshToken($token);
|
||||
$csrfTokenManager->refreshToken('invoice.delete');
|
||||
|
||||
try {
|
||||
$this->service->deleteInvoice($invoice);
|
||||
@@ -462,7 +462,7 @@ final class InvoiceController extends AbstractController
|
||||
return $this->redirectToRoute('admin_invoice_template');
|
||||
}
|
||||
|
||||
$csrfTokenManager->refreshToken($token);
|
||||
$csrfTokenManager->refreshToken('invoice.delete_template');
|
||||
|
||||
try {
|
||||
$this->templateRepository->removeTemplate($template);
|
||||
|
||||
Reference in New Issue
Block a user