Prevent error on CSRF token conversion

vdlp · Jun 8, 2020 · 33fee18 · 33fee18
1 parent d5bb04c
commit 33fee18
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/middleware/VerifyCsrfTokenMiddleware.php b/middleware/VerifyCsrfTokenMiddleware.php
@@ -13,6 +13,7 @@
 use Illuminate\Routing\Redirector;
 use October\Rain\Cookie\Middleware\EncryptCookies;
 use RuntimeException;
+use Throwable;
 
 /**
  * Class VerifyCsrfTokenMiddleware
@@ -124,6 +125,10 @@ private function getTokenFromRequest(Request $request): string
             $token = $this->encrypter->decrypt($header, EncryptCookies::serialized('XSRF-TOKEN'));
         }
 
-        return (string) $token;
+        try {
+            return (string) $token;
+        } catch (Throwable $e) {
+            return '';
+        }
     }
 }