Buriburizaemon/admin-frontend-domain
1
0
Fork 0
mirror of https://github.com/Buriburizaem0n/admin-frontend-domain.git synced 2026-09-19 09:40:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(cron): switch manual trigger to POST to match backend CSRF fix

Browse Source 
Backend GHSA-8qhj-4f8c-j8qg moves /api/v1/cron/:id/manual from GET to
POST so SameSite=Lax cookies no longer expose this state-changing
endpoint to cross-site CSRF. Update runCron() accordingly.

Co-authored-by: cloudcode <cloudcode@users.noreply.github.com>
This commit is contained in:
naiba
2026-05-26 04:00:15 +00:00
co-authored by cloudcode
parent b23a6c0be1
commit f2fea38e10
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/api/cron.ts
+1 -1
View File
@@ -15,5 +15,5 @@ export const deleteCron = async (id: number[]): Promise<void> => {
} }
export const runCron = async (id: number): Promise<void> => { export const runCron = async (id: number): Promise<void> => {
return fetcher<void>(FetcherMethod.GET, `/api/v1/cron/${id}/manual`, null) return fetcher<void>(FetcherMethod.POST, `/api/v1/cron/${id}/manual`, null)
} }