add missing csrf token validation to admin (#1696)

2026-02-02 23:23:15 +08:00 · 2021-11-09 11:22:08 -05:00
parent 9582e94232
commit fcc1a4e10c
2 changed files with 10 additions and 13 deletions
--- a/src/Admin/Controllers/ProvidersController.cs
+++ b/src/Admin/Controllers/ProvidersController.cs
@@ -70,6 +70,7 @@ namespace Bit.Admin.Controllers
        }

        [HttpPost]
+        [ValidateAntiForgeryToken]
        public async Task<IActionResult> Create(CreateProviderModel model)
        {
            if (!ModelState.IsValid)