|
@@ -526,12 +526,13 @@ if ((!defined('NOCSRFCHECK') && empty($dolibarr_nocsrfcheck) && getDolGlobalInt(
|
|
|
$arrayofactiontoforcetokencheck = array(
|
|
|
'activate',
|
|
|
'doprev', 'donext', 'dvprev', 'dvnext',
|
|
|
- 'install',
|
|
|
+ 'freezone', 'install',
|
|
|
'reopen'
|
|
|
);
|
|
|
if (in_array(GETPOST('action', 'aZ09'), $arrayofactiontoforcetokencheck)) {
|
|
|
$sensitiveget = true;
|
|
|
}
|
|
|
+ // We also match for value with just a simple string that must match
|
|
|
if (preg_match('/^(add|classify|close|confirm|copy|del|disable|enable|remove|set|unset|update|save)/', GETPOST('action', 'aZ09'))) {
|
|
|
$sensitiveget = true;
|
|
|
}
|