Skip to content
Snippets Groups Projects
Commit f2d520af authored by Jan-Hendrik Willms's avatar Jan-Hendrik Willms
Browse files

jsupdater should not tinker with the flash, fixes #4507

Closes #4507

Merge request studip/studip!3300
parent f643d469
No related branches found
No related tags found
No related merge requests found
......@@ -30,6 +30,9 @@ class JsupdaterController extends AuthenticatedController
{
parent::before_filter($action, $args);
// Keep all things in flash, this controller show tinker with those values
$this->flash->keep();
// Check for a valid logged in user (only when an ajax request occurs)
if (Request::isXhr() && (!is_object($GLOBALS['user']) || $GLOBALS['user']->id === 'nobody')) {
$this->response->set_status(403);
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment