CommandActions: Only respond with JSON if it's an API request

fixes #945
Icinga · Mar 18, 2024 · c2e977b · c2e977b
1 parent 4293461
commit c2e977b
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/library/Icingadb/Common/CommandActions.php b/library/Icingadb/Common/CommandActions.php
@@ -139,7 +139,8 @@ protected function assertIsGrantedOnCommandTargets(string $permission)
     protected function handleCommandForm($form)
     {
         $isXhr = $this->getRequest()->isXmlHttpRequest();
-        if ($isXhr && $this->getRequest()->isApiRequest()) {
+        $isApi = $this->getRequest()->isApiRequest();
+        if ($isXhr && $isApi) {
             // Prevents the framework already, this is just a fail-safe
             $this->httpBadRequest('Responding with JSON during a Web request is not supported');
         }
@@ -151,7 +152,7 @@ protected function handleCommandForm($form)
 
         $form->setObjects($this->getCommandTargets());
 
-        if ($isXhr) {
+        if (! $isApi || $isXhr) {
             $this->handleWebRequest($form);
         } else {
             $this->handleApiRequest($form);