security: use more antiforgery tokens

2025-07-25 12:32:44 +10:00
parent fd43d85778
commit 7deead494b
222 changed files with 12919 additions and 11728 deletions
@@ -23,7 +23,8 @@ namespace Disco.Web.Areas.Config.Controllers
        }

        #region Plugin Configuration
-        [DiscoAuthorize(Claims.Config.Plugin.Configure), HttpPost, ValidateInput(false)]
+        [DiscoAuthorize(Claims.Config.Plugin.Configure), ValidateInput(false)]
+        [HttpPost, ValidateAntiForgeryToken]
        public virtual ActionResult Configure(string PluginId, FormCollection form)
        {
            if (string.IsNullOrEmpty(PluginId))