MAGETWO-45757: CSRF Vulnerability on Cart Checkout

Author: Stanislav Idolov

app/code/Magento/Checkout/Controller/Cart/Delete.php

@@ -15,6 +15,10 @@ class Delete extends \Magento\Checkout\Controller\Cart
      */
     public function execute()
     {
+        if (!$this->_formKeyValidator->validate($this->getRequest())) {
+            return $this->resultRedirectFactory->create()->setPath('*/*/');
+        }
+
         $id = (int)$this->getRequest()->getParam('id');
         if ($id) {
             try {