Prevents Stepping On When An Incoming Request Is Ajax

cms-forks · Aug 3, 2020 · 1ce6546 · 1ce6546
1 parent a7cb617
commit 1ce6546
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/Http/Middleware/SudoMiddleware.php b/src/Http/Middleware/SudoMiddleware.php
@@ -44,6 +44,10 @@ public function __construct(Sudo $sudo)
      */
     public function handle($request, Closure $next)
     {
+        if ($request->ajax() || ! $request->isMethod('GET')) {
+            return $next($request);
+        }
+
         if (! $this->sudo->isEnabled() || $this->isExcepted($request)) {
             return $next($request);
         }