Unguard two external POST endpoints from CSRF.

2011-08-18 07:25:45 -07:00
parent ae7488f710
commit a67ce60d67
2 changed files with 6 additions and 0 deletions
--- a/src/applications/repository/controller/github-post-receive/PhabricatorRepositoryGitHubPostReceiveController.php
+++ b/src/applications/repository/controller/github-post-receive/PhabricatorRepositoryGitHubPostReceiveController.php
@@ -56,6 +56,9 @@ class PhabricatorRepositoryGitHubPostReceiveController
          "won't do anything!");
    }

+    // GitHub POSTs here and doesn't do CSRF.
+    $unguarded = AphrontWriteGuard::beginScopedUnguardedWrites();
+
    $notification = new PhabricatorRepositoryGitHubNotification();
    $notification->setRepositoryPHID($repo->getPHID());
    $notification->setRemoteAddress($_SERVER['REMOTE_ADDR']);