From 19bdfc026700087bc1c910fbf8920aa0a77f4f5c Mon Sep 17 00:00:00 2001 From: Inverle Date: Tue, 30 Dec 2025 23:41:09 +0100 Subject: Fix refreshing feeds with token while anonymous refresh is disabled (#8371) Closes https://github.com/FreshRSS/FreshRSS/issues/8369 Regression from https://github.com/FreshRSS/FreshRSS/pull/8165 --- app/Controllers/feedController.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'app') diff --git a/app/Controllers/feedController.php b/app/Controllers/feedController.php index 1829417c1..99b760bc5 100644 --- a/app/Controllers/feedController.php +++ b/app/Controllers/feedController.php @@ -22,7 +22,7 @@ class FreshRSS_feed_Controller extends FreshRSS_ActionController { return; } - if ($action !== 'actualize' || !$allow_anonymous_refresh) { + if ($action !== 'actualize' || (!$allow_anonymous_refresh && !Minz_Request::tokenIsOk())) { Minz_Error::error(403); } } -- cgit v1.2.3