NodeBB-Community / nodebb-plugin-custom-pages

Allows you to add as many new pages as you like to your NodeBB forum
BSD 2-Clause "Simplified" License
39 stars 24 forks source link

Missing csrf token middleware on creating route #65

Closed rples closed 4 years ago

rples commented 4 years ago

Plugin is not adding csrf token in the middlewares. As a result when custom page is set as a homepage of the forum it's causing troubles with the missing csrf token (also if user will refresh the page on custom page).

The missing part is middleware.applyCSRF when creating non-api middlewares (library.js, line 36)