- Fix CSRF token access for tigher TAL path expression security (fixes …

…#99)
zopefoundation · Jun 8, 2021 · 6476278 · 6476278
1 parent 80b3344
commit 6476278
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/CHANGES.rst b/CHANGES.rst
@@ -3,6 +3,11 @@ Change Log
 
 2.6.3 (unreleased)
 ------------------
+
+- Fix CSRF token access for tigher TAL path expression security in Zope 5.2.1
+  (`#99
+  <https://github.com/zopefoundation/Products.PluggableAuthService/issues/99>`_)
+
 - Changed adding object gui to modal window
 
 - Handle login issues for cookie based login when ``came_from`` is missing

diff --git a/src/Products/PluggableAuthService/configure.zcml b/src/Products/PluggableAuthService/configure.zcml
@@ -7,6 +7,7 @@
       name="csrf_token"
       class=".utils.CSRFToken"
       permission="zope.Public"
+      attribute="token"
       />
 
   <include file="exportimport.zcml" />