PaulLereverend / NextcloudExtract

Bring extraction to your nextcloud web interface
GNU Affero General Public License v3.0
51 stars 16 forks source link

CSRF check on ajax/extract, why not? #90

Open rotdrop opened 2 years ago

rotdrop commented 2 years ago

I'm just briefly reviewing your app as I loosely plan on-the-fly archive extraction for my app https://github.com/rotdrop/nextcloud-app-pdf-downloader. So just out of curiosity: why are you disabling the CSRF check for the extract route? Thx, Claus