diff --git a/classes/rpc.php b/classes/rpc.php index 7f809f29b..dbb98e9b7 100755 --- a/classes/rpc.php +++ b/classes/rpc.php @@ -2,7 +2,7 @@ class RPC extends Handler_Protected { function csrf_ignore($method) { - $csrf_ignored = array("sanitycheck", "completelabels", "saveprofile"); + $csrf_ignored = array("completelabels", "saveprofile"); return array_search($method, $csrf_ignored) !== false; } diff --git a/js/App.js b/js/App.js index 7eb4b7f48..2bc2020bb 100644 --- a/js/App.js +++ b/js/App.js @@ -588,6 +588,7 @@ const App = { this.setLoadingProgress(30); this.initHotkeyActions(); + this.enableCsrfSupport(); const a = document.createElement('audio'); const hasAudio = !!a.canPlayType; @@ -628,7 +629,6 @@ const App = { return errorMsg == ""; }, initSecondStage: function() { - this.enableCsrfSupport(); document.onkeydown = (event) => { return this.hotkeyHandler(event) }; document.onkeypress = (event) => { return this.hotkeyHandler(event) };