TagsController::admin_delete() accessible via any HTTP verb
Closed this issue · 1 comments
burzum commented
Cake2 Version.
The TagsController::admin_delete() method is accessible via any HTTP verb.
This should be only accessible via POST?
andrej-griniuk commented
Fixed and merged to develop.