e-smith-formmagick/sme9/smeserver-e-smith-formmagick-csrf.patch

diff -ruN e-smith-formmagick-2.4.0.old/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm e-smith-formmagick-2.4.0/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm
--- e-smith-formmagick-2.4.0.old/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm  2018-10-22 15:22:48.373509019 +0200
+++ e-smith-formmagick-2.4.0/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm      2018-10-22 15:23:34.669783573 +0200
@@ -224,7 +224,8 @@
                 source => $data,   
                 charset => $charset,
                 sessiondir => $sessiondir,
-                debug => $args{debug}
+                debug => $args{debug},
+                csrf => 1
             );   
 
     my $fallback = "en-us";
diff -Nur e-smith-formmagick-2.4.0.old/root/etc/e-smith/locale/en-us/FormMagick/general e-smith-formmagick-2.4.0/root/etc/e-smith/locale/en-us/FormMagick/general
--- e-smith-formmagick-2.4.0.old/root/etc/e-smith/locale/en-us/FormMagick/general       2013-01-25 12:23:48.000000000 -0500
+++ e-smith-formmagick-2.4.0/root/etc/e-smith/locale/en-us/FormMagick/general   2019-01-27 16:03:02.543000000 -0500
@@ -712,4 +712,8 @@
        <base>FM_ERR_UNEXPECTED_DESC</base>
        <trans>Error: unexpected or missing characters in description</trans>
     </entry>
+    <entry>
+        <base>CSRF_VALIDATION_FAILURE</base>
+        <trans>Error: CSRF token is invalid or outdated.</trans>
+    </entry>
 </lexicon>
1	diff -ruN e-smith-formmagick-2.4.0.old/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm e-smith-formmagick-2.4.0/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm
2	--- e-smith-formmagick-2.4.0.old/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm 2018-10-22 15:22:48.373509019 +0200
3	+++ e-smith-formmagick-2.4.0/root/usr/share/perl5/vendor_perl/esmith/FormMagick.pm 2018-10-22 15:23:34.669783573 +0200
4	@@ -224,7 +224,8 @@
5	source => $data,
6	charset => $charset,
7	sessiondir => $sessiondir,
8	- debug => $args{debug}
9	+ debug => $args{debug},
10	+ csrf => 1
11	);
12
13	my $fallback = "en-us";
14	diff -Nur e-smith-formmagick-2.4.0.old/root/etc/e-smith/locale/en-us/FormMagick/general e-smith-formmagick-2.4.0/root/etc/e-smith/locale/en-us/FormMagick/general
15	--- e-smith-formmagick-2.4.0.old/root/etc/e-smith/locale/en-us/FormMagick/general 2013-01-25 12:23:48.000000000 -0500
16	+++ e-smith-formmagick-2.4.0/root/etc/e-smith/locale/en-us/FormMagick/general 2019-01-27 16:03:02.543000000 -0500
17	@@ -712,4 +712,8 @@
18	<base>FM_ERR_UNEXPECTED_DESC</base>
19	<trans>Error: unexpected or missing characters in description</trans>
20	</entry>
21	+ <entry>
22	+ <base>CSRF_VALIDATION_FAILURE</base>
23	+ <trans>Error: CSRF token is invalid or outdated.</trans>
24	+ </entry>
25	</lexicon>