1 files changed, 4 insertions, 0 deletions
diff --git a/core/controllers/rest.php b/core/controllers/rest.php
index ceca321e..b91bb0d0 100644
--- a/core/controllers/rest.php
+++ b/core/controllers/rest.php
@@ -86,6 +86,10 @@ class REST_Controller extends Controller {
       return Kohana::show_404();
     }
 
+    if ($request_method != "get") {
+      access::verify_csrf();
+    }
+
     switch ($request_method) {
     case "get":
       return $this->_show($resource);