versione pre-stable

2026-05-28 11:57:47 +02:00
parent 425f8cb5a4
commit c90506a25d
29 changed files with 166 additions and 1250 deletions
@@ -19,6 +19,8 @@ if (!Profile::canCurrentUser(READ)) {
 $server = new Server();

 if ($_SERVER['REQUEST_METHOD'] === 'POST') {
+    Session::checkCSRF();
+
    if (isset($_POST['link_asset'])) {
        $itemtype = (string) ($_POST['itemtype'] ?? '');
        $items_id = (int) ($_POST['items_id'] ?? 0);