Leahnaya/mastodon
1
0
Fork 0
mirror of https://github.com/mastodon/mastodon.git synced 2026-08-28 14:13:09 -05:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Fix Web Push subscription deletion endpoint incorrectly expecting anti-CSRF tokens (#39918)

Browse Source
This commit is contained in:
Claire
2026-07-22 16:38:49 +02:00
parent 503aee6be4
commit d813ddd1db
2 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
app/controllers/api/web/push_subscriptions_controller.rb
View File

@@ -6,6 +6,8 @@ class Api::Web::PushSubscriptionsController < Api::Web::BaseController
before_action :destroy_previous_subscriptions, only: :create, if: :prior_subscriptions?
after_action :update_session_with_subscription, only: :create
skip_forgery_protection only: :destroy
def create
@push_subscription = ::Web::PushSubscription.create!(web_push_subscription_params)