fix: add back req.query fallback for backwards compatibility

NodeBB · Feb 22, 2023 · 83d3633 · 83d3633
1 parent ea95668
commit 83d3633
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/middleware/csrf.js b/src/middleware/csrf.js
@@ -11,6 +11,8 @@ const {
 			return req.headers['x-csrf-token'];
 		} else if (req.body.csrf_token) {
 			return req.body.csrf_token;
+		} else if (req.query) {
+			return req.query._csrf;
 		}
 	},
 	size: 64,