Using "timestampTolerance" on both sides

mep-agency · Jun 17, 2024 · 602f3bb · 602f3bb
1 parent f4a21d6
commit 602f3bb
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/composer/packages/web-toolkit-bundle/src/Service/PrivacyConsentManager.php b/composer/packages/web-toolkit-bundle/src/Service/PrivacyConsentManager.php
@@ -289,7 +289,7 @@ private function validateTimestamp(array $data, ?array $latestConsentData): void
 
         $userTimestamp = $data[self::JSON_KEY_TIMESTAMP];
 
-        if ($userTimestamp < $_SERVER['REQUEST_TIME'] - $this->timestampTolerance || $userTimestamp > $_SERVER['REQUEST_TIME'] + 1) {
+        if ($userTimestamp < $_SERVER['REQUEST_TIME'] - $this->timestampTolerance || $userTimestamp > $_SERVER['REQUEST_TIME'] + $this->timestampTolerance) {
             throw new InvalidUserConsentDataException(
                 InvalidUserConsentDataException::TIMESTAMP_IS_NOT_IN_VALID_RANGE,
             );