From 6b0dab16efeb4c003aa4e8c927738bd40945de1d Mon Sep 17 00:00:00 2001
From: thomasb <thomasb@208e9e7b-5314-0410-a742-e7e81cd9613c>
Date: Sun, 30 Oct 2011 11:34:31 +0000
Subject: Allow cross-task ajax requests

git-svn-id: https://svn.roundcube.net/trunk@5375 208e9e7b-5314-0410-a742-e7e81cd9613c
---
 roundcubemail/index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'roundcubemail/index.php')

diff --git a/roundcubemail/index.php b/roundcubemail/index.php
index a1eb54587..dce3db36d 100644
--- a/roundcubemail/index.php
+++ b/roundcubemail/index.php
@@ -195,7 +195,7 @@ else {
   // check client X-header to verify request origin
   if ($OUTPUT->ajax_call) {
     if (rc_request_header('X-Roundcube-Request') != $RCMAIL->get_request_token() && !$RCMAIL->config->get('devel_mode')) {
-      header('HTTP/1.1 404 Not Found');
+      header('HTTP/1.1 403 Forbidden');
       die("Invalid Request");
     }
   }
-- 
cgit v1.2.3