Unset _token

... so it's not returned back to the client
This commit is contained in:
Aleksander Machniak 2019-09-28 13:09:36 +02:00
parent 39cff09d8f
commit b97a138033

View file

@ -983,8 +983,11 @@ class tasklist extends rcube_plugin
$list = rcube_utils::get_input_value('l', rcube_utils::INPUT_GPC, true);
$success = false;
if (isset($list['showalarms']))
$list['showalarms'] = intval($list['showalarms']);
unset($list['_token']);
if (isset($list['showalarms'])) {
$list['showalarms'] = intval($list['showalarms']);
}
switch ($action) {
case 'form-new':