--- rpms/e-smith-formmagick/sme10/e-smith-formmagick-2.6.0-bz10902-csrf-timeout.patch 2021/03/06 05:54:03 1.1 +++ rpms/e-smith-formmagick/sme10/e-smith-formmagick-2.6.0-bz10902-csrf-timeout.patch 2021/03/06 06:01:00 1.2 @@ -1,6 +1,6 @@ diff -Nur e-smith-formmagick-2.6.0.old/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm e-smith-formmagick-2.6.0/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm --- e-smith-formmagick-2.6.0.old/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm 2021-03-06 00:48:19.688000000 -0500 -+++ e-smith-formmagick-2.6.0/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm 2021-03-06 00:52:00.069000000 -0500 ++++ e-smith-formmagick-2.6.0/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm 2021-03-06 01:00:32.343000000 -0500 @@ -20,6 +20,7 @@ use esmith::I18N; use POSIX qw(strftime); @@ -18,15 +18,17 @@ diff -Nur e-smith-formmagick-2.6.0.old/r =begin _private The import method is doing some tricky stuff to make sure that when -@@ -216,6 +219,7 @@ +@@ -216,6 +219,9 @@ $data = ; } + my $csrfdelay = $args{csrfdelay} || $configdb->get('httpd-admin')->prop('csrfTimeout') || '180'; ++ $csrfdelay = ($csrfdelay =~ /\D/ )? 180 : $csrfdelay; ++ $csrfdelay = ( $csrfdelay > 500) ? 500 : $csrfdelay; my $sessiondir = "/var/cache/e-smith/formmagick/sessions"; my $charset = $args{charset} || 'UTF-8'; -@@ -225,7 +229,8 @@ +@@ -225,7 +231,8 @@ charset => $charset, sessiondir => $sessiondir, debug => $args{debug},