diff --git a/app/code/Magento/Checkout/Controller/Cart/Delete.php b/app/code/Magento/Checkout/Controller/Cart/Delete.php
index 3d73a5f0c205a..fae9903a845e1 100644
--- a/app/code/Magento/Checkout/Controller/Cart/Delete.php
+++ b/app/code/Magento/Checkout/Controller/Cart/Delete.php
@@ -15,6 +15,10 @@ class Delete extends \Magento\Checkout\Controller\Cart
*/
public function execute()
{
+ if (!$this->_formKeyValidator->validate($this->getRequest())) {
+ return $this->resultRedirectFactory->create()->setPath('*/*/');
+ }
+
$id = (int)$this->getRequest()->getParam('id');
if ($id) {
try {
diff --git a/app/code/Magento/Checkout/Model/DefaultConfigProvider.php b/app/code/Magento/Checkout/Model/DefaultConfigProvider.php
index 2b512d5e30783..c23f79a3192c0 100644
--- a/app/code/Magento/Checkout/Model/DefaultConfigProvider.php
+++ b/app/code/Magento/Checkout/Model/DefaultConfigProvider.php
@@ -265,6 +265,7 @@ public function getConfig()
$output['isCustomerLoginRequired'] = $this->isCustomerLoginRequired();
$output['registerUrl'] = $this->getRegisterUrl();
$output['checkoutUrl'] = $this->getCheckoutUrl();
+ $output['defaultSuccessPageUrl'] = $this->getDefaultSuccessPageUrl();
$output['pageNotFoundUrl'] = $this->pageNotFoundUrl();
$output['forgotPasswordUrl'] = $this->getForgotPasswordUrl();
$output['staticBaseUrl'] = $this->getStaticBaseUrl();
@@ -451,6 +452,17 @@ public function pageNotFoundUrl()
return $this->urlBuilder->getUrl('checkout/noroute');
}
+ /**
+ * Retrieve default success page URL
+ *
+ * @return string
+ * @codeCoverageIgnore
+ */
+ public function getDefaultSuccessPageUrl()
+ {
+ return $this->urlBuilder->getUrl('checkout/onepage/success/');
+ }
+
/**
* Retrieve selected shipping method
*
diff --git a/app/code/Magento/Checkout/etc/adminhtml/system.xml b/app/code/Magento/Checkout/etc/adminhtml/system.xml
index 39393518e7942..3015e63108993 100644
--- a/app/code/Magento/Checkout/etc/adminhtml/system.xml
+++ b/app/code/Magento/Checkout/etc/adminhtml/system.xml
@@ -21,13 +21,6 @@
Magento\Config\Model\Config\Source\Yesno
-
-
- Magento\Config\Model\Config\Source\Yesno
-
- 0
-
-
diff --git a/app/code/Magento/Checkout/view/frontend/layout/checkout_index_index.xml b/app/code/Magento/Checkout/view/frontend/layout/checkout_index_index.xml
index 5a459eed8af1b..8ddcc09f5efe3 100644
--- a/app/code/Magento/Checkout/view/frontend/layout/checkout_index_index.xml
+++ b/app/code/Magento/Checkout/view/frontend/layout/checkout_index_index.xml
@@ -41,7 +41,7 @@
- Magento_Checkout/js/view/authentication
- authentication
-
-
+
-
- 0
- Magento_Checkout/js/view/authentication-messages
@@ -167,7 +167,7 @@
-
-
+
-
- uiComponent
- before-shipping-method-form
@@ -184,7 +184,7 @@
- additional-fieldsets
-
-
+
-
- false
@@ -310,6 +310,17 @@
- checkout.steps.billing-step.payment.additional-payment-validators
+ -
+
-
+
- uiComponent
+ - before-place-order
+ - before-place-order
+ - checkoutProvider
+ -
+
- Magento_Checkout/payment/before-place-order
+
+
+
-
@@ -433,4 +444,4 @@