Dev Enabled CSRF protection by default

LimeSurvey · Jul 22, 2013 · db924b5 · db924b5
1 parent 15ba6da
commit db924b5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/application/core/LSYii_Application.php b/application/core/LSYii_Application.php
@@ -109,7 +109,7 @@ public function __construct($config = null)
                 'getSurveys_json',
                 'remotecontrol'
             ),
-            'enableCsrfValidation'=>false,    // Enable to activate CSRF protection
+            'enableCsrfValidation'=>true,    // CSRF protection
             'enableCookieValidation'=>false   // Enable to activate cookie protection
         ));