- Issue created by @marchuk.vitaliy
- First commit to issue fork.
- Merge request !8Add setting to not process links without referer URL. β (Open) created by khiminrm
- Status changed to Needs review
about 1 year ago 4:21pm 2 April 2024
In general, if the referer URL doesn't exist, it means that someone is making a direct call to the /cart-links URL, which shouldn't be possible, since "Cart links" must be embedded in the text (inside or outside the site) and the referer URL must always exist.
Code to update:
// If the referer URL is empty, the request was made from a direct URL.
$referer_url = $this->currentRequest->headers->get('referer');
if (empty($referer_url)) {
// @todo Should it be allowed?
return TRUE;
}
Needs review
1.0
Code