# HG changeset patch # User Peter Sanchez # Date 1680044938 21600 # Tue Mar 28 17:08:58 2023 -0600 # Node ID 58d6160dbdb57fd8341cce280f0a900131e08af8 # Parent 208b5fdfe9d22b01b52c2bbf1f44f9c99df21608 Adding proper path check for csrfSkipper diff --git a/server/server.go b/server/server.go --- a/server/server.go +++ b/server/server.go @@ -380,7 +380,9 @@ func (s *Server) csrfSkipper(c echo.Context) bool { // Rethink this loop. Maybe there's a better way? for _, v := range s.csrfSkip { - if v == c.Path() { + if v == c.Path() { // Check for URL pattern + return true + } else if v == c.Request().URL.Path { return true } }