| Subject: | CSRFProtect & HEAD requests |
This condition is not quite correct:
if ( ( $is_ajax || $c->req->method ne 'GET' ) && !$self-
Show quoted text
>_is_valid_csrftoken($c) ) {
For, say, HEAD requests a CSRFProtect's error message appears in log, but
it shouldn't. Thanks )