From 41a389fda32226ad742d2030e4c3f8ef991b9191 Mon Sep 17 00:00:00 2001 From: Alec Smecher Date: Mon, 18 Oct 2021 17:33:54 -0700 Subject: [PATCH] pkp/pkp-lib#7371 Add missing CSRF check --- .../datacite/classes/form/DataciteSettingsForm.inc.php | 1 + 1 file changed, 1 insertion(+) diff --git a/plugins/importexport/datacite/classes/form/DataciteSettingsForm.inc.php b/plugins/importexport/datacite/classes/form/DataciteSettingsForm.inc.php index e5fcfcda44a..98573269679 100644 --- a/plugins/importexport/datacite/classes/form/DataciteSettingsForm.inc.php +++ b/plugins/importexport/datacite/classes/form/DataciteSettingsForm.inc.php @@ -87,6 +87,7 @@ public function __construct($plugin, $contextId) // The username is used in HTTP basic authentication and according to RFC2617 it therefore may not contain a colon. $this->addCheck(new \PKP\form\validation\FormValidatorRegExp($this, 'username', FormValidator::FORM_VALIDATOR_OPTIONAL_VALUE, 'plugins.importexport.datacite.settings.form.usernameRequired', '/^[^:]+$/')); $this->addCheck(new \PKP\form\validation\FormValidatorPost($this)); + $this->addCheck(new \PKP\form\validation\FormValidatorCSRF($this)); }