fix(core) sonar fix

issue #5840

fix(core) sonar fix
issue #5840
1ac4c8b5 · Côme Chilliet · 3b51b48c · 1ac4c8b5
Commit 1ac4c8b5 authored 6 years ago by Côme Chilliet
Hide whitespace changes
Inline Side-by-side

Showing

with 2 additions and 4 deletions
+2 -4
--- a/include/class_CSRFProtection.inc
+++ b/include/class_CSRFProtection.inc
@@ -61,10 +61,8 @@ class CSRFProtection
      if (!empty($_SERVER['HTTP_HOST'])) {
        $target = $_SERVER['HTTP_HOST'];
      }
-      if ($target) {
+      if ($target && !hash_equals($origin, $target)) {
-        if (!hash_equals($origin, $target)) {
+        throw new FusionDirectoryException('CSRF detected: origin and target are not matching ('.$origin.' != '.$target.')');
-          throw new FusionDirectoryException('CSRF detected: origin and target are not matching ('.$origin.' != '.$target.')');
-        }
      }
    }
  }