php/yii2
1
0
Fork 0
mirror of https://github.com/yiisoft/yii2.git synced 2025-11-03 05:48:11 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix 'unafe' typo

Browse Source
This commit is contained in:
Oleg Baturin
2024-11-28 12:01:15 +07:00
parent 9d1a7972e5
commit 36b34b0dc1
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
framework/web/Request.php
View File

@ -140,7 +140,7 @@ class Request extends \yii\base\Request
* This property is used only when both [[enableCsrfValidation]] and [[validateCsrfHeaderOnly]] are true.
* @see https://fetch.spec.whatwg.org/#http-cors-protocol
*/
public $csrfHeaderUnafeMethods = ['GET', 'HEAD', 'POST'];
public $csrfHeaderUnsafeMethods = ['GET', 'HEAD', 'POST'];
/**
* @var bool whether to use custom header only to CSRF validation of SPA. Defaults to false.
* If false and [[enableCsrfValidation]] is true, CSRF validation by token will used.
@ -1897,7 +1897,7 @@ class Request extends \yii\base\Request
$method = $this->getMethod();
if ($this->validateCsrfHeaderOnly) {
return in_array($method, $this->csrfHeaderUnafeMethods, true)
return in_array($method, $this->csrfHeaderUnsafeMethods, true)
? $this->headers->has($this->csrfHeader)
: true;
}

2
tests/framework/web/RequestTest.php
View File

@ -297,7 +297,7 @@ class RequestTest extends TestCase
$this->mockWebApplication();
$request = new Request();
$request->csrfHeaderUnafeMethods = ['POST'];
$request->csrfHeaderUnsafeMethods = ['POST'];
$request->validateCsrfHeaderOnly = true;
$request->enableCsrfValidation = true;