diff options
| author |  Inverle <inverle@proton.me>
| 2025-12-30 23:41:09 +0100 |
|---|---|---|
| committer |  GitHub <noreply@github.com>
| 2025-12-30 23:41:09 +0100 |
| commit | 19bdfc026700087bc1c910fbf8920aa0a77f4f5c (patch) | |
| tree | 83ac6ab547d33f81e1cee4af84e72f180673b773 /app | |
| parent | 579f945af7e22315e6aea7b1000ce146f078db10 (diff) | |
Fix refreshing feeds with token while anonymous refresh is disabled (#8371)
Closes https://github.com/FreshRSS/FreshRSS/issues/8369
Regression from https://github.com/FreshRSS/FreshRSS/pull/8165
Diffstat (limited to 'app')
| -rw-r--r-- | app/Controllers/feedController.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/app/Controllers/feedController.php b/app/Controllers/feedController.php index 1829417c1..99b760bc5 100644 --- a/app/Controllers/feedController.php +++ b/app/Controllers/feedController.php @@ -22,7 +22,7 @@ class FreshRSS_feed_Controller extends FreshRSS_ActionController { return; } - if ($action !== 'actualize' || !$allow_anonymous_refresh) { + if ($action !== 'actualize' || (!$allow_anonymous_refresh && !Minz_Request::tokenIsOk())) { Minz_Error::error(403); } } |