diff options
| author | Evan Prodromou <evan@status.net> | 2010-03-26 09:17:47 -0400 |
|---|---|---|
| committer | Evan Prodromou <evan@status.net> | 2010-03-26 09:17:47 -0400 |
| commit | 36a8e8e8a33e384faa17360a89ecf16c785bc86f (patch) | |
| tree | 71b93e7c01b43486def268fab624693b93d642c2 /plugins/OpenID/openidlogin.php | |
| parent | 29a25848dee2863b380779d6b8f979b66365d924 (diff) | |
| parent | 9c63ae6e443e7b23f64e31617a1762393473509a (diff) | |
Merge branch 'testing' into 0.9.x
Diffstat (limited to 'plugins/OpenID/openidlogin.php')
| -rw-r--r-- | plugins/OpenID/openidlogin.php | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/plugins/OpenID/openidlogin.php b/plugins/OpenID/openidlogin.php index 9ba55911c..2a743672c 100644 --- a/plugins/OpenID/openidlogin.php +++ b/plugins/OpenID/openidlogin.php @@ -31,6 +31,8 @@ class OpenidloginAction extends Action } else if ($_SERVER['REQUEST_METHOD'] == 'POST') { $openid_url = $this->trimmed('openid_url'); + oid_assert_allowed($openid_url); + # CSRF protection $token = $this->trimmed('token'); if (!$token || $token != common_session_token()) { |