Skip to content

Commit da8f905

Browse files
authored
more friendly message on invalid CSRF token (#416)
1 parent 1072f73 commit da8f905

File tree

1 file changed

+7
-1
lines changed

1 file changed

+7
-1
lines changed

resources/lib/UnityHTTPD.php

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -394,7 +394,13 @@ public static function validatePostCSRFToken(): void
394394
{
395395
$token = self::getPostData("csrf_token");
396396
if (!CSRFToken::validate($token)) {
397-
self::badRequest("CSRF token validation failed", data: ["token" => $token]);
397+
$errorid = uniqid();
398+
self::errorLog("csrf failed to validate", "", errorid: $errorid);
399+
self::messageError(
400+
"Invalid Session Token",
401+
"This can happen if you leave your browser open for a long time. Error ID: $errorid",
402+
);
403+
self::redirect();
398404
}
399405
}
400406

0 commit comments

Comments
 (0)