e-smith-formmagick/sme10/e-smith-formmagick-2.6.0-bz10902-csrf-timeout.patch

diff -Nur e-smith-formmagick-2.6.0.old/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm e-smith-formmagick-2.6.0/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm
--- e-smith-formmagick-2.6.0.old/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm  2021-03-06 00:48:19.688000000 -0500
+++ e-smith-formmagick-2.6.0/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm      2021-03-06 01:00:32.343000000 -0500
@@ -20,6 +20,7 @@
 use esmith::I18N;
 use POSIX qw(strftime);
 # use I18N::LangTags qw(super_languages);
+use esmith::ConfigDB;
 
 @ISA = qw(CGI::FormMagick Exporter);
 
@@ -38,6 +39,8 @@
     _read_lexicons
 );
 
+our $configdb = esmith::ConfigDB->open_ro();
+
 =begin _private
 
 The import method is doing some tricky stuff to make sure that when 
@@ -216,6 +219,9 @@
         $data = <main::DATA>;
     }
 
+    my $csrfdelay = $args{csrfdelay} || $configdb->get('httpd-admin')->prop('csrfTimeout') || '180';
+    $csrfdelay = ($csrfdelay =~ /\D/ )? 180 : $csrfdelay;
+    $csrfdelay = ( $csrfdelay > 500) ? 500 : $csrfdelay;
     my $sessiondir = "/var/cache/e-smith/formmagick/sessions";
     my $charset = $args{charset} || 'UTF-8';
 
@@ -225,7 +231,8 @@
                 charset => $charset,
                 sessiondir => $sessiondir,
                 debug => $args{debug},
-                csrf => 1
+                csrf => 1,
+               csrfdelay => $csrfdelay
             );   
 
     my $fallback = "en-us";
1	diff -Nur e-smith-formmagick-2.6.0.old/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm e-smith-formmagick-2.6.0/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm
2	--- e-smith-formmagick-2.6.0.old/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm 2021-03-06 00:48:19.688000000 -0500
3	+++ e-smith-formmagick-2.6.0/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm 2021-03-06 01:00:32.343000000 -0500
4	@@ -20,6 +20,7 @@
5	use esmith::I18N;
6	use POSIX qw(strftime);
7	# use I18N::LangTags qw(super_languages);
8	+use esmith::ConfigDB;
9
10	@ISA = qw(CGI::FormMagick Exporter);
11
12	@@ -38,6 +39,8 @@
13	_read_lexicons
14	);
15
16	+our $configdb = esmith::ConfigDB->open_ro();
17	+
18	=begin _private
19
20	The import method is doing some tricky stuff to make sure that when
21	@@ -216,6 +219,9 @@
22	$data = <main::DATA>;
23	}
24
25	+ my $csrfdelay = $args{csrfdelay} \|\| $configdb->get('httpd-admin')->prop('csrfTimeout') \|\| '180';
26	+ $csrfdelay = ($csrfdelay =~ /\D/ )? 180 : $csrfdelay;
27	+ $csrfdelay = ( $csrfdelay > 500) ? 500 : $csrfdelay;
28	my $sessiondir = "/var/cache/e-smith/formmagick/sessions";
29	my $charset = $args{charset} \|\| 'UTF-8';
30
31	@@ -225,7 +231,8 @@
32	charset => $charset,
33	sessiondir => $sessiondir,
34	debug => $args{debug},
35	- csrf => 1
36	+ csrf => 1,
37	+ csrfdelay => $csrfdelay
38	);
39
40	my $fallback = "en-us";