Merge pull request #5 from chrisguitarguy/fix-is-disabled

Use `$procedure` in `isDisabled` Method Check
dneustadt · Mar 31, 2022 · adf351a · adf351a
2 parents 6fe0ee4 + e702392
commit adf351a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Service/CsrfRequestEvaluator.php b/Service/CsrfRequestEvaluator.php
@@ -160,7 +160,7 @@ public function isDisabled(string $procedure, Request $request, ?Response $respo
             || empty($csrf[$procedure])
             || (!empty($csrf['exclude']) && is_array($csrf['exclude']) && in_array($attributes->get('_route'), $csrf['exclude'], true))
             || (!empty($csrf['condition']) && $this->evaluateCondition($csrf['condition'], $request, $response) === false)
-            || (is_array($csrf[$procedure]) && !in_array($request->getMethod(), $csrf[self::REQUIRE], true))
+            || (is_array($csrf[$procedure]) && !in_array($request->getMethod(), $csrf[$procedure], true))
         ;
     }