#3454

zikula · Jul 14, 2017 · 8d4d255 · 8d4d255
1 parent 98839d7
commit 8d4d255
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/lib/Zikula/Bundle/HookBundle/Controller/HookController.php b/src/lib/Zikula/Bundle/HookBundle/Controller/HookController.php
@@ -394,7 +394,7 @@ private function checkAjaxToken($token = null)
         if (!$currentRequest->isXmlHttpRequest()) {
             throw new \Exception();
         }
-        // @todo how to SET the $_SERVER['HTTP_X_ZIKULA_AJAX_TOKEN'] ?
+        // how/where is $_SERVER['HTTP_X_ZIKULA_AJAX_TOKEN'] set? refs #3454
         $headerToken = ($currentRequest->server->has('HTTP_X_ZIKULA_AJAX_TOKEN')) ? $currentRequest->server->get('HTTP_X_ZIKULA_AJAX_TOKEN') : null;
         if ($headerToken == $currentRequest->getSession()->getId()) {
             return;