Version 4.7.6

applications/core/modules/admin/system/login.php

@@ -52,6 +52,10 @@ class _login extends \IPS\Dispatcher\Controller
 		{
 			if( \IPS\Application::load('core')->long_version < \IPS\Application::getAvailableVersion('core') and \IPS\Application::load('core')->version != \IPS\Application::getAvailableVersion( 'core', TRUE ) )
 			{
+				/* Force no caching */
+				@header( "Cache-control: no-cache, no-store, must-revalidate, max-age=0, s-maxage=0" );
+				@header( "Expires: 0" );
+
 				if ( \IPS\CIC )
 				{
 					include( \IPS\ROOT_PATH . '/' . \IPS\CP_DIRECTORY . '/upgrade/upgradeAvailableCic.php' );
@@ -296,8 +300,11 @@ class _login extends \IPS\Dispatcher\Controller
 	 *
 	 * @return string|null
 	 */
-	public function getCsrfKey(): ?string
+	public function getCsrfKey()
 	{
+		/* Don't cache the CSRF key */
+		\IPS\Output::i()->pageCaching = FALSE;
+
 		\IPS\Output::i()->json( [ 'key' => \IPS\Session::i()->csrfKey ] );
 	}
 }