Don't do csrf for view=image

2018-08-31 11:58:17 -04:00 · 2018-08-31 11:58:17 -04:00 · 623d31edae
parent 7ee80e7cca
commit 623d31edae
1 changed files with 1 additions and 0 deletions
--- a/web/index.php
+++ b/web/index.php
@ -210,6 +210,7 @@ if (
  ZM_ENABLE_CSRF_MAGIC &&
  ( $action != 'login' ) &&
  ( $view != 'view_video' ) &&
+  ( $view != 'image' ) &&
  ( $request != 'control' ) && 
  ( $view != 'frames' ) && 
  ( $view != 'archive' )