StarMC/Astral-nook
StarMC/Astral-nook
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

(security) use POST for logout rather than GET

Browse source 
see https://github.com/pterodactyl/panel/security/advisories/GHSA-m49f-hcxp-6hm6
This commit is contained in:
Dane Everitt 2021-10-23 13:00:21 -07:00
parent 22a8b2b3a2
commit 45999ba4ee
No known key found for this signature in database
GPG key ID: EEA66103B3D71F53
3 changed files with 18 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
routes/auth.php
View file

@ -48,4 +48,4 @@ Route::group(['middleware' => 'guest'], function () {
| Endpoint: /auth
|
*/
Route::get('/logout', 'LoginController@logout')->name('auth.logout')->middleware('auth');
Route::post('/logout', 'LoginController@logout')->name('auth.logout')->middleware('auth', 'csrf');