Verified Commit 662dd45f authored by Andrei Mateescu's avatar Andrei Mateescu
Browse files

task: #3582512 Add SensitiveParameter attribute to CsrfTokenGenerator::validate() 

By: prudloff
By: sourav_paul
By: phenaproxima
(cherry picked from commit b528aa65)
parent fdfa98a9

core/lib/Drupal/Core/Access/CsrfTokenGenerator.php

+1 −1
Original line number Diff line number Diff line
@@ -81,7 +81,7 @@ public function get($value = '') { 
   * @return bool

   *   TRUE for a valid token, FALSE for an invalid token.

   */

  public function validate($token, $value = '') {

  public function validate(#[\SensitiveParameter] $token, $value = '') {

    $seed = $this->sessionMetadata->getCsrfTokenSeed();

    if (empty($seed)) {

      return FALSE;