adulau/cakephp2-php8
1
0
Fork 0
mirror of https://github.com/kamilwylegala/cakephp2-php8.git synced 2025-02-07 12:36:25 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Data passed through FormHelper::postLink is excluded from CSRF creation of an outer form. Subsequent fix for #8387.

Browse source
This commit is contained in:
Markus Bauer 2016-03-02 03:02:43 +01:00
parent 7df96b3912
commit 95558d0bba
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
lib/Cake/View/Helper/FormHelper.php
View file

@ -1883,7 +1883,7 @@ class FormHelper extends AppHelper {
if (isset($options['data']) && is_array($options['data'])) { if (isset($options['data']) && is_array($options['data'])) {
foreach (Hash::flatten($options['data']) as $key => $value) { foreach (Hash::flatten($options['data']) as $key => $value) {
$fields[$key] = $value; $fields[$key] = $value;
$out .= $this->hidden($key, array('value' => $value, 'id' => false)); $out .= $this->hidden($key, array('value' => $value, 'id' => false, 'secure' => static::SECURE_SKIP));
} }
unset($options['data']); unset($options['data']);
} }