Skip to content

Commit

Permalink
Browse files Browse the repository at this point in the history
security: cross-site request forgery
- huntr bounty
  • Loading branch information
HDVinnie committed Sep 24, 2021
1 parent efb593e commit 220db85
Show file tree
Hide file tree
Showing 2 changed files with 9 additions and 5 deletions.
12 changes: 8 additions & 4 deletions resources/views/partials/dashboardmenu.blade.php
Expand Up @@ -51,7 +51,7 @@
<form role="form" method="POST" action="{{ route('staff.flush.chat') }}" style="padding: 10px 15px;">
@csrf
<i class="{{ config('other.font-awesome') }} fa-broom"></i>
<button type="submit" class="btn btn-xs btn-info">
<button type="submit" class="btn btn-xs btn-info" style="margin-bottom: 5px;">
@lang('staff.flush-chat')
</button>
</form>
Expand Down Expand Up @@ -132,9 +132,13 @@
</a>
</li>
<li>
<a href="{{ route('staff.flush.peers') }}">
<i class="fab fa-snapchat-ghost"></i> @lang('staff.flush-ghost-peers')
</a>
<form role="form" method="POST" action="{{ route('staff.flush.peers') }}" style="padding: 10px 15px;">
@csrf
<i class="{{ config('other.font-awesome') }} fa-ghost"></i>
<button type="submit" class="btn btn-xs btn-info" style="margin-bottom: 5px;">
@lang('staff.flush-ghost-peers')
</button>
</form>
</li>

<li class="nav-header head">
Expand Down
2 changes: 1 addition & 1 deletion routes/web.php
Expand Up @@ -748,7 +748,7 @@
// Flush System
Route::group(['prefix' => 'flush'], function () {
Route::name('staff.flush.')->group(function () {
Route::get('/peers', [App\Http\Controllers\Staff\FlushController::class, 'peers'])->name('peers');
Route::post('/peers', [App\Http\Controllers\Staff\FlushController::class, 'peers'])->name('peers');
Route::post('/chat', [App\Http\Controllers\Staff\FlushController::class, 'chat'])->name('chat');
});
});
Expand Down

0 comments on commit 220db85

Please sign in to comment.