From c782400287d08a7df4c037740dbb95efb004d7fd Mon Sep 17 00:00:00 2001
From: Erik Dannenberg <erik.dannenberg@xtrade-gmbh.de>
Date: Mon, 17 Aug 2020 14:35:45 +0200
Subject: [PATCH] [bug-#871] admin/security/validate_formkey_checkout not
 enabled by default

---
 app/code/core/Mage/Checkout/etc/config.xml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/app/code/core/Mage/Checkout/etc/config.xml b/app/code/core/Mage/Checkout/etc/config.xml
index c56c324c2f0..fd99549593b 100644
--- a/app/code/core/Mage/Checkout/etc/config.xml
+++ b/app/code/core/Mage/Checkout/etc/config.xml
@@ -237,6 +237,11 @@
         </translate>
     </adminhtml>
     <default>
+        <admin>
+            <security>
+                <validate_formkey_checkout>1</validate_formkey_checkout>
+            </security>
+        </admin>
         <checkout>
             <options>
                 <onepage_checkout_enabled>1</onepage_checkout_enabled>