[5.5] Fix: verify csrf token allows to except full urls (#22619)

* Fix: verify csrf token allows to except full urls * Update VerifyCsrfToken.php
laravel · Jan 2, 2018 · 42fb248 · 42fb248
1 parent 8d4eeac
commit 42fb248
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/Illuminate/Foundation/Http/Middleware/VerifyCsrfToken.php b/src/Illuminate/Foundation/Http/Middleware/VerifyCsrfToken.php
@@ -104,7 +104,7 @@ protected function inExceptArray($request)
                 $except = trim($except, '/');
             }
 
-            if ($request->is($except)) {
+            if ($request->url() === $except || $request->is($except)) {
                 return true;
             }
         }