feat: Add generate session token to CsrfTokenManager

Signed-off-by: Carl Schwan <carlschwan@kde.org>

Author: CarlSchwan

lib/private/AppFramework/Middleware/Security/SecurityMiddleware.php

@@ -196,7 +196,7 @@ public function beforeController($controller, $methodName) {
 			}
 		}
 		// CSRF check - also registers the CSRF token since the session may be closed later
-		Server::get(CsrfTokenManager::class)->getToken()->getEncryptedValue();
+		Server::get(CsrfTokenManager::class)->generateSessionToken();
 		if ($this->isInvalidCSRFRequired($reflectionMethod)) {
 			/*
 			 * Only allow the CSRF check to fail on OCS Requests. This kind of

lib/private/Security/CSRF/CsrfTokenManager.php

@@ -74,4 +74,8 @@ public function isTokenValid(CsrfToken $token): bool {
 			$token->getDecryptedValue()
 		);
 	}
+
+	public function generateSessionToken(): void {
+		$this->getToken();
+	}
 }

lib/public/Util.php

@@ -449,7 +449,6 @@ public static function sanitizeHTML(string|array|null $value): string|array {
 				return htmlspecialchars((string)$value, ENT_QUOTES, 'UTF-8');
 			}, $value);
 		}
-		// Specify encoding for PHP<5.4
 		return htmlspecialchars((string)$value, ENT_QUOTES, 'UTF-8');
 	}