Fix refreshing feeds with token while anonymous refresh is disabled (#8371)

Closes https://github.com/FreshRSS/FreshRSS/issues/8369
Regression from https://github.com/FreshRSS/FreshRSS/pull/8165
This commit is contained in:
Inverle
2025-12-30 23:41:09 +01:00
committed by GitHub
parent 579f945af7
commit 19bdfc0267

View File

@@ -22,7 +22,7 @@ class FreshRSS_feed_Controller extends FreshRSS_ActionController {
return;
}
if ($action !== 'actualize' || !$allow_anonymous_refresh) {
if ($action !== 'actualize' || (!$allow_anonymous_refresh && !Minz_Request::tokenIsOk())) {
Minz_Error::error(403);
}
}