Problem/Motivation

There is no token validation on the controller route.

Please protect it https://www.drupal.org/docs/8/api/routing-system/access-checking-on-routes/csrf-access-checking

Issue fork one_time_login_link_admin-3283483

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks

Comments

Zarpele created an issue. See original summary.

Zarpele opened merge request !9

zarpele’s picture

zarpele commented
Status: Active » Needs review
subhransu sekhar’s picture

subhransu sekhar commented
Status: Needs review » Fixed

Code merged and released

subhransu sekhar’s picture

subhransu sekhar commented
Status: Fixed » Closed (fixed)

All the changes have been reviewed and deployed so closing the issue.