Destroy session when invalid, use more compatible js path

2017-05-14 21:54:18 +02:00
parent e795898b80
commit d06e938d0e
2 changed files with 7 additions and 3 deletions
--- a/data/web/inc/lib/vendor/owasp/csrf-protector-php/libs/config.php
+++ b/data/web/inc/lib/vendor/owasp/csrf-protector-php/libs/config.php
@@ -39,9 +39,9 @@ return array(
 	"customErrorMessage" => "",
 	"jsPath" => "../js/csrfprotector.js",
  // Fetching IS_HTTPS from sessions handler
-	"jsUrl" => get_trusted_hostname(),
+	"jsUrl" => "/inc/lib/vendor/owasp/csrf-protector-php/js/csrfprotector.js",
 	"tokenLength" => 10,
 	"secureCookie" => false,
 	"disabledJavascriptMessage" => "",
 	 "verifyGetFor" => array()
-);
+);