Support sending all _rx_* POST fields as HTTP headers instead

하위호환성, 부가기능 등을 위한 _rx_* POST 필드가 점점 많아짐에 따라
모두 헤더로 대체할 수 있도록 지원하고, 앞으로 점점 헤더로 바꿀 예정

CSRF 토큰은 예전부터 X-CSRF-Token 헤더를 지원했음
This commit is contained in:
Kijin Sung 2023-08-27 23:32:31 +09:00
parent dc492345da
commit 06e736178b
5 changed files with 17 additions and 11 deletions

View file

@ -11,7 +11,7 @@ class Member extends ModuleObject
* Constants
*/
public const ADMIN_EXTRA_VARS = ['refused_reason', 'limited_reason'];
public const NOUSE_EXTRA_VARS = ['error_return_url', 'success_return_url', '_rx_ajax_compat', '_rx_csrf_token', 'ruleset', 'captchaType', 'use_editor', 'use_html'];
public const NOUSE_EXTRA_VARS = ['error_return_url', 'success_return_url', '_rx_ajax_compat', '_rx_ajax_form', '_rx_csrf_token', 'ruleset', 'captchaType', 'use_editor', 'use_html'];
public const STATUS_LIST = ['APPROVED', 'DENIED', 'UNAUTHED', 'SUSPENDED', 'DELETED'];
/**