Removing _Token from request data.

It is not used outside the component and could possibly affect Model::save(). Fixes #2256 Signed-off-by: mark_story <mark@mark-story.com>
cakephp · Nov 16, 2011 · 2bb4ed0 · 2bb4ed0
1 parent 6e4493c
commit 2bb4ed0
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/lib/Cake/Controller/Component/SecurityComponent.php b/lib/Cake/Controller/Component/SecurityComponent.php
@@ -208,6 +208,9 @@ public function startup($controller) {
 			}
 		}
 		$this->_generateToken($controller);
+		if ($isPost) {
+			unset($controller->request->data['_Token']);
+		}
 	}
 
 /**