view core/modules/rest/rest.routing.yml @ 13:5fb285c0d0e3

Update Drupal core to 8.4.7 via Composer. Security update; I *think* we've
been lucky to get away with this so far, as we don't support self-registration
which seems to be used by the so-called "drupalgeddon 2" attack that 8.4.5
was vulnerable to.

# @deprecated This route is deprecated, use the system.csrftoken route from the
# system module instead.
# @todo Remove this route in Drupal 9.0.0.
rest.csrftoken:
  path: '/rest/session/token'
  defaults:
    _controller: '\Drupal\system\Controller\CsrfTokenController::csrfToken'
  requirements:
    _access: 'TRUE'