Fix #huntr5bb5a52-3b1c-40ad-9c64-61735f886736

Dolibarr · Jul 20, 2021 · c2f1781 · c2f1781
1 parent dc7ff07
commit c2f1781
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/htdocs/main.inc.php b/htdocs/main.inc.php
@@ -461,7 +461,7 @@ function analyseVarsForSqlAndScriptsInjection(&$var, $type)
 	// Array of action code where CSRFCHECK with token will be forced (so token must be provided on url request)
 	$arrayofactiontoforcetokencheck = array(
 	    'activate', 'add', 'addrights', 'addtimespent',
-	    'confirm_create_user', 'confirm_create_thirdparty', 'confirm_purge', 'confirm_reject_check', 'confirm_deletedir',
+	    'confirm_create_user', 'confirm_create_thirdparty', 'confirm_purge', 'confirm_reject_check', 'confirm_deletedir', 'confirm_deletefile',
 	    'delete', 'deletefilter', 'deleteoperation', 'deleteprof', 'deletepayment', 'delrights',
 	    'disable',
 	    'doprev', 'donext', 'dvprev', 'dvnext',