Should direct calls to /cart-links URLs be allowed?

Created on 29 November 2023, 7 months ago
Updated 2 April 2024, 3 months ago

In general, if the referer URL doesn't exist, it means that someone is making a direct call to the /cart-links URL, which shouldn't be possible, since "Cart links" must be embedded in the text (inside or outside the site) and the referer URL must always exist.

Code to update:

    // If the referer URL is empty, the request was made from a direct URL.
    $referer_url = $this->currentRequest->headers->get('referer');
    if (empty($referer_url)) {
      // @todo Should it be allowed?
      return TRUE;
    }
πŸ“Œ Task
Status

Needs review

Version

1.0

Component

Code

Created by

πŸ‡ΊπŸ‡¦Ukraine marchuk.vitaliy Rivne, UA

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

Production build 0.69.0 2024