Added a missing CSRF check

13 years ago · ac79fe649c
parent 80aa44565b
commit ac79fe649c
1 changed files with 2 additions and 0 deletions
--- a/core/ajax/share.php
+++ b/core/ajax/share.php
@ -21,6 +21,8 @@
 require_once '../../lib/base.php';

 OC_JSON::checkLoggedIn();
+OCP\JSON::callCheck();
+
 if (isset($_POST['action']) && isset($_POST['itemType']) && isset($_POST['itemSource'])) {
 	switch ($_POST['action']) {
 		case 'share':