diff options
| author | Goffin Simon <sig@odoo.com> | 2015-11-17 11:55:06 +0100 |
|---|---|---|
| committer | Goffin Simon <sig@odoo.com> | 2015-11-24 11:35:57 +0100 |
| commit | 32c8280a02310053fce2b87423def16ca884e6b0 (patch) | |
| tree | 51a6fec3e7011ed0f9f2b37921aa5aedea8d3c6b /addons/payment_authorize/controllers | |
| parent | db7ed45a4e5da3f303d5cfda4718e5f31a212527 (diff) | |
[FIX] payment_adyen, payment_authorize, payment_buckaroo, payment_paypal, payment_sips: Disable csrf on callbacks
Inspired from 2099f15d67564ab153d48993cca0f80aee04bb09
opw:653341
Diffstat (limited to 'addons/payment_authorize/controllers')
| -rw-r--r-- | addons/payment_authorize/controllers/main.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/addons/payment_authorize/controllers/main.py b/addons/payment_authorize/controllers/main.py index 1279c23ce26..93b3d105f9a 100644 --- a/addons/payment_authorize/controllers/main.py +++ b/addons/payment_authorize/controllers/main.py @@ -16,7 +16,7 @@ class AuthorizeController(http.Controller): @http.route([ '/payment/authorize/return/', '/payment/authorize/cancel/', - ], type='http', auth='public') + ], type='http', auth='public', csrf=False) def authorize_form_feedback(self, **post): _logger.info('Authorize: entering form_feedback with post data %s', pprint.pformat(post)) return_url = '/' |