From 623d31edae25c23eb8df5aee9bf5eda4e66e30a3 Mon Sep 17 00:00:00 2001
From: Isaac Connor <isaac@zoneminder.com>
Date: Fri, 31 Aug 2018 11:58:17 -0400
Subject: [PATCH] Don't do csrf for view=image

---
 web/index.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/web/index.php b/web/index.php
index 9df89ac4b..0bda75ad6 100644
--- a/web/index.php
+++ b/web/index.php
@@ -210,6 +210,7 @@ if (
   ZM_ENABLE_CSRF_MAGIC &&
   ( $action != 'login' ) &&
   ( $view != 'view_video' ) &&
+  ( $view != 'image' ) &&
   ( $request != 'control' ) && 
   ( $view != 'frames' ) && 
   ( $view != 'archive' )