Send error message when CSRF token is missing (#13676)

kevinzg · web-flow · commit 247ab6a92205 · 2020-11-23T07:56:04.000Z
diff --git a/modules/context/api.go b/modules/context/api.go
@@ -169,7 +169,7 @@ func (ctx *APIContext) RequireCSRF() {
 	if len(headerToken) > 0 || len(formValueToken) > 0 {
 		csrf.Validate(ctx.Context.Context, ctx.csrf)
 	} else {
-		ctx.Context.Error(401)
+		ctx.Context.Error(401, "Missing CSRF token.")
 	}
 }
 

Original file line number	Diff line number	Diff line change
`@@ -169,7 +169,7 @@ func (ctx *APIContext) RequireCSRF() {`
`169`	`169`	`if len(headerToken) > 0 \|\| len(formValueToken) > 0 {`
`170`	`170`	`csrf.Validate(ctx.Context.Context, ctx.csrf)`
`171`	`171`	`} else {`
`172`		`- ctx.Context.Error(401)`
	`172`	`+ ctx.Context.Error(401, "Missing CSRF token.")`
`173`	`173`	`}`
`174`	`174`	`}`
`175`	`175`