Add CSRF check

pkp · Oct 3, 2023 · 86a5c7d · 86a5c7d
1 parent 8d6870b
commit 86a5c7d
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/controllers/grid/CustomBlockGridHandler.inc.php b/controllers/grid/CustomBlockGridHandler.inc.php
@@ -199,6 +199,8 @@ function updateCustomBlock($args, $request) {
 	 * @return string Serialized JSON object
 	 */
 	function deleteCustomBlock($args, $request) {
+		if (!$request->checkCSRF()) return new JSONMessage(false);
+
 		$blockName = $request->getUserVar('blockName');
 		$context = $request->getContext();
 		$contextId = $context ? $context->getId() : 0;