diff -Nur e-smith-formmagick-2.6.0.old/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm e-smith-formmagick-2.6.0/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm --- e-smith-formmagick-2.6.0.old/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm 2021-03-06 00:48:19.688000000 -0500 +++ e-smith-formmagick-2.6.0/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm 2021-03-06 01:00:32.343000000 -0500 @@ -20,6 +20,7 @@ use esmith::I18N; use POSIX qw(strftime); # use I18N::LangTags qw(super_languages); +use esmith::ConfigDB; @ISA = qw(CGI::FormMagick Exporter); @@ -38,6 +39,8 @@ _read_lexicons ); +our $configdb = esmith::ConfigDB->open_ro(); + =begin _private The import method is doing some tricky stuff to make sure that when @@ -216,6 +219,9 @@ $data = ; } + my $csrfdelay = $args{csrfdelay} || $configdb->get('httpd-admin')->prop('csrfTimeout') || '180'; + $csrfdelay = ($csrfdelay =~ /\D/ )? 180 : $csrfdelay; + $csrfdelay = ( $csrfdelay > 500) ? 500 : $csrfdelay; my $sessiondir = "/var/cache/e-smith/formmagick/sessions"; my $charset = $args{charset} || 'UTF-8'; @@ -225,7 +231,8 @@ charset => $charset, sessiondir => $sessiondir, debug => $args{debug}, - csrf => 1 + csrf => 1, + csrfdelay => $csrfdelay ); my $fallback = "en-us";