Exclude booking pages from CSRF protection
This commit is contained in:
parent
b253a002a8
commit
14305d08cc
1 changed files with 4 additions and 1 deletions
|
@ -387,7 +387,10 @@ $config['csrf_protection'] = TRUE;
|
||||||
$config['csrf_token_name'] = 'csrf_token';
|
$config['csrf_token_name'] = 'csrf_token';
|
||||||
$config['csrf_cookie_name'] = 'csrf_cookie';
|
$config['csrf_cookie_name'] = 'csrf_cookie';
|
||||||
$config['csrf_expire'] = 7200;
|
$config['csrf_expire'] = 7200;
|
||||||
$config['csrf_exclude_uris'] = ['api/v1/.*'];
|
$config['csrf_exclude_uris'] = [
|
||||||
|
'api/v1/.*',
|
||||||
|
'booking/.*'
|
||||||
|
];
|
||||||
|
|
||||||
/*
|
/*
|
||||||
|--------------------------------------------------------------------------
|
|--------------------------------------------------------------------------
|
||||||
|
|
Loading…
Reference in a new issue