mirror of
https://github.com/BookStackApp/BookStack.git
synced 2026-10-23 06:49:01 +03:00
f239524447
There's only one route that should ignore CSRF, and that's already marked to not use the CSRF middlware in the routes definition. Helps prevent potential CSRF based logout from subdomains (same-sites). Thanks to The Xora team for responsibly reporting.