Fixed included triggering on other request-types than post

skipperbent · skipperbent · commit 3534233a76e3 · 2023-12-09T18:39:33.000+01:00
diff --git a/src/Pecee/Http/Middleware/BaseCsrfVerifier.php b/src/Pecee/Http/Middleware/BaseCsrfVerifier.php
@@ -98,7 +98,7 @@ protected function skip(Request $request): bool
      */
     public function handle(Request $request): void
     {
-        if ($this->skip($request) === false && ($request->isPostBack() === true || $this->isIncluded($request) === true)) {
+        if ($this->skip($request) === false && ($request->isPostBack() === true || $request->isPostBack() === true && $this->isIncluded($request) === true)) {
 
             $token = $request->getInputHandler()->value(
                 static::POST_KEY,

Original file line number	Diff line number	Diff line change
`@@ -98,7 +98,7 @@ protected function skip(Request $request): bool`
`98`	`98`	`*/`
`99`	`99`	`public function handle(Request $request): void`
`100`	`100`	`{`
`101`		`- if ($this->skip($request) === false && ($request->isPostBack() === true \|\| $this->isIncluded($request) === true)) {`
	`101`	`+ if ($this->skip($request) === false && ($request->isPostBack() === true \|\| $request->isPostBack() === true && $this->isIncluded($request) === true)) {`
`102`	`102`
`103`	`103`	`$token = $request->getInputHandler()->value(`
`104`	`104`	`static::POST_KEY,`