This commit is contained in:
conory 2017-04-26 11:09:56 +09:00
parent 099e371e30
commit 921197699b

View file

@ -56,7 +56,7 @@ class documentView extends document
*/
function dispDocumentPreview()
{
if(Context::getRequestMethod() == 'GET')
if(!checkCSRF())
{
return new Object(-1, 'msg_invalid_request');
}