diff --git a/CHANGELOG.md b/CHANGELOG.md index 602b7b3..7a33a70 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,10 @@ Changelog ================== +## 3.4.0 - 2024-06-27 +### Fixed +- fix: Allow csrf retrieval for asyncCsrfInputs. Thanks to @Tim-Wils + ## 3.3.7 - 2024-03-07 ### Fixed - fix: removed reference to old code diff --git a/src/services/Request.php b/src/services/Request.php index c95b6c0..cb8c324 100644 --- a/src/services/Request.php +++ b/src/services/Request.php @@ -114,6 +114,7 @@ private function shouldRedirectCp() $pathInfo = $request->getPathInfo(); + // Allow csrf retrieval for asyncCsrfInputs $backEndPathAllow = array_merge(['actions/users/session-info'], $settings->backEndPathAllow); $isAllowed = false;