Change getLoginStatus method to POST (enable CSRF check, etc.)

This commit is contained in:
Kijin Sung 2022-08-05 10:38:55 +09:00
parent 0cc1246898
commit f8aa934935

View file

@ -32,7 +32,7 @@
<action name="dispMemberLogout" type="view" meta-noindex="true" />
<action name="dispMemberSpammer" type="view" permission="manager" check_var="module_srl" meta-noindex="true" />
<action name="getLoginStatus" type="model" meta-noindex="true" />
<action name="getLoginStatus" type="model" method="POST" meta-noindex="true" />
<action name="getMemberMenu" type="model" />
<action name="getApiGroups" type="model" permission="root" />