IMPORTANT: parent::handlePost() in NewnoticeAction
otherwise we don't do csrf checking etc...
This commit is contained in:
parent
0612e5ec87
commit
89b10666bb
|
@ -101,6 +101,8 @@ class NewnoticeAction extends FormAction
|
|||
*/
|
||||
protected function handlePost()
|
||||
{
|
||||
parent::handlePost();
|
||||
|
||||
assert($this->scoped); // XXX: maybe an error instead...
|
||||
$user = $this->scoped->getUser();
|
||||
$content = $this->trimmed('status_textarea');
|
||||
|
|
Loading…
Reference in New Issue
Block a user