Permalink
Browse files

Remove csrfToken from secured fields.

It is validated separately and causes validation errors right now.
  • Loading branch information...
1 parent 4a3cbb1 commit 360fe3896ffeb374767668ba97811ad211c7736b @markstory markstory committed Mar 11, 2014
Showing with 1 addition and 1 deletion.
  1. +1 −1 src/Controller/Component/SecurityComponent.php
@@ -305,7 +305,7 @@ protected function _validatePost(Controller $controller) {
if (strpos($token, ':')) {
list($token, $locked) = explode(':', $token, 2);
}
- unset($check['_Token']);
+ unset($check['_Token'], $check['_csrfToken']);
$locked = explode('|', $locked);
$unlocked = explode('|', $unlocked);

0 comments on commit 360fe38

Please sign in to comment.