evo/evoleasing-public
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security audit fixes: task ID 12: remove /api/account/token/ method

Browse Source
This commit is contained in:
merelendor 2024-11-30 11:32:11 +00:00
parent 444da1fddf
commit 0e3fe5fd8a
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
api/index.php
View File

@ -2598,12 +2598,14 @@ switch($PARAM_1)
{
switch($PARAM_2)
{
/* DEPRECATED & DISABLED due to security reasons
case "token":
{
print \Bitrix\Main\Web\JWT::encode(["acc_number" => $REQ['acc_number']], $secret, 'HS256', null, null);
die();
}
break;
*/
case "recovery":
{