Loading src/Controller/RestUIController.php +1 −1 Changes for src/Controller/RestUIController.php: 1 added line, 1 removed line. Original line number Diff line number Diff line Loading @@ -208,7 +208,7 @@ class RestUIController implements ContainerInjectionInterface { * @throws \Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException */ public function disable($resource_id, Request $request) { if (!drupal_valid_token($request->query->get('token'), 'restui_disable')) { if (!\Drupal::csrfToken()->validate($request->query->get('token'), 'restui_disable')) { // Throw an access denied exception if the token is invalid or missing. throw new AccessDeniedHttpException(); } Loading Loading
src/Controller/RestUIController.php +1 −1 Changes for src/Controller/RestUIController.php: 1 added line, 1 removed line. Original line number Diff line number Diff line Loading @@ -208,7 +208,7 @@ class RestUIController implements ContainerInjectionInterface { * @throws \Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException */ public function disable($resource_id, Request $request) { if (!drupal_valid_token($request->query->get('token'), 'restui_disable')) { if (!\Drupal::csrfToken()->validate($request->query->get('token'), 'restui_disable')) { // Throw an access denied exception if the token is invalid or missing. throw new AccessDeniedHttpException(); } Loading