e-smith-formmagick/sme10/smeserver-e-smith-formmagick-csrf.patch

diff -ruN e-smith-formmagick-2.4.0.old/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm e-smith-formmagick-2.4.0/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm
--- e-smith-formmagick-2.4.0.old/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm  2018-10-22 15:22:48.373509019 +0200
+++ e-smith-formmagick-2.4.0/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm      2018-10-22 15:23:34.669783573 +0200
@@ -224,7 +224,8 @@
                 source => $data,   
                 charset => $charset,
                 sessiondir => $sessiondir,
-                debug => $args{debug}
+                debug => $args{debug},
+                csrf => 1
             );   
 
     my $fallback = "en-us";
diff -Nur e-smith-formmagick-2.4.0.old/root/etc/e-smith/locale/en-us/FormMagick/general e-smith-formmagick-2.4.0/root/etc/e-smith/locale/en-us/FormMagick/general
--- e-smith-formmagick-2.4.0.old/root/etc/e-smith/locale/en-us/FormMagick/general       2013-01-25 12:23:48.000000000 -0500
+++ e-smith-formmagick-2.4.0/root/etc/e-smith/locale/en-us/FormMagick/general   2019-01-27 16:03:02.543000000 -0500
@@ -712,4 +712,8 @@
        <base>FM_ERR_UNEXPECTED_DESC</base>
        <trans>Error: unexpected or missing characters in description</trans>
     </entry>
+    <entry>
+        <base>CSRF_VALIDATION_FAILURE</base>
+        <trans>Error: CSRF token is invalid or outdated.</trans>
+    </entry>
 </lexicon>
1	jpp	1.1	diff -ruN e-smith-formmagick-2.4.0.old/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm e-smith-formmagick-2.4.0/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm
2			--- e-smith-formmagick-2.4.0.old/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm 2018-10-22 15:22:48.373509019 +0200
3			+++ e-smith-formmagick-2.4.0/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm 2018-10-22 15:23:34.669783573 +0200
4			@@ -224,7 +224,8 @@
5			source => $data,
6			charset => $charset,
7			sessiondir => $sessiondir,
8			- debug => $args{debug}
9			+ debug => $args{debug},
10			+ csrf => 1
11			);
12
13			my $fallback = "en-us";
14	jpp	1.2	diff -Nur e-smith-formmagick-2.4.0.old/root/etc/e-smith/locale/en-us/FormMagick/general e-smith-formmagick-2.4.0/root/etc/e-smith/locale/en-us/FormMagick/general
15			--- e-smith-formmagick-2.4.0.old/root/etc/e-smith/locale/en-us/FormMagick/general 2013-01-25 12:23:48.000000000 -0500
16			+++ e-smith-formmagick-2.4.0/root/etc/e-smith/locale/en-us/FormMagick/general 2019-01-27 16:03:02.543000000 -0500
17			@@ -712,4 +712,8 @@
18			<base>FM_ERR_UNEXPECTED_DESC</base>
19			<trans>Error: unexpected or missing characters in description</trans>
20			</entry>
21			+ <entry>
22			+ <base>CSRF_VALIDATION_FAILURE</base>
23			+ <trans>Error: CSRF token is invalid or outdated.</trans>
24			+ </entry>
25			</lexicon>