Don't require CSRF valdiation for preview requests

craftcms · Jun 18, 2019 · 54831ac · 54831ac
1 parent 41324fd
commit 54831ac
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/src/controllers/PreviewController.php b/src/controllers/PreviewController.php
@@ -36,6 +36,19 @@ class PreviewController extends Controller
     // Public Methods
     // =========================================================================
 
+    /**
+     * @inheritdoc
+     */
+    public function beforeAction($action)
+    {
+        // Don't require CSRF validation for POSTed preview requests
+        if ($action->id === 'preview') {
+            $this->enableCsrfValidation = false;
+        }
+
+        return parent::beforeAction($action);
+    }
+
     /**
      * Creates a token for previewing/sharing an element.
      *