Exclude booking pages from CSRF protection

This commit is contained in:
Alex Tselegidis 2022-05-20 18:21:44 +02:00
parent b253a002a8
commit 14305d08cc

View file

@ -387,7 +387,10 @@ $config['csrf_protection'] = TRUE;
$config['csrf_token_name'] = 'csrf_token'; $config['csrf_token_name'] = 'csrf_token';
$config['csrf_cookie_name'] = 'csrf_cookie'; $config['csrf_cookie_name'] = 'csrf_cookie';
$config['csrf_expire'] = 7200; $config['csrf_expire'] = 7200;
$config['csrf_exclude_uris'] = ['api/v1/.*']; $config['csrf_exclude_uris'] = [
'api/v1/.*',
'booking/.*'
];
/* /*
|-------------------------------------------------------------------------- |--------------------------------------------------------------------------