Disable CSRF protection on /import page (fix #341)

Sonerezh · Aug 27, 2018 · 71e062e · 71e062e
1 parent 9519574
commit 71e062e
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/app/Controller/SongsController.php b/app/Controller/SongsController.php
@@ -9,6 +9,11 @@ class SongsController extends AppController {
 
     public function beforeFilter() {
         parent::beforeFilter();
+
+        if ($this->request->params['action'] == 'import' && $this->request->is('post')) {
+            $this->Security->validatePost = false;
+            $this->Security->csrfCheck = false;
+        }
     }
 
     /**