woocommerce/woocommerce-paypal-payments
2
0
Fork 0
mirror of https://github.com/woocommerce/woocommerce-paypal-payments.git synced 2025-09-06 16:24:33 +08:00
Code Issues Projects Packages Wiki Activity Actions

Merge pull request #1339 from woocommerce/PCP-1600-v2-possible-cross-site-request-forgery-csrf-can-invalidate-merchant-credentials

Browse source 
Cross Site Request Forgery (CSRF) can invalidate merchant credentials (1600)
This commit is contained in:
Emili Castells 2023-04-27 11:25:46 +02:00 • committed by GitHub
commit a7abff6bca
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
modules/ppcp-wc-gateway/src/Settings/SettingsListener.php
View file

@ -168,8 +168,7 @@ class SettingsListener {
* Listens if the merchant ID should be updated.
*/
public function listen_for_merchant_id() {
if ( ! $this->is_valid_site_request() ) {
if ( ! $this->is_valid_site_request() || $this->state->current_state() === State::STATE_ONBOARDED ) {
return;
}