Fix Core\Csrf for instant redirects

2021-02-20 16:36:28 +07:00 · 2021-02-20 16:36:28 +07:00 · 9410dba830
commit 9410dba830
parent a472b859c6
1 changed files with 1 additions and 1 deletions
--- a/app/Core/Csrf.php
+++ b/app/Core/Csrf.php
@ -66,7 +66,7 @@ class Csrf

        $result = \is_string($token)
            && \preg_match('%f(\d+)$%D', $token, $matches)
-            && $matches[1] + 0 < $now
+            && $matches[1] + 0 <= $now
            && $matches[1] + 1800 >= $now
            && \hash_equals($this->create($marker, $args, $matches[1]), $token);