MC-32546: Website Payments Pro Hosted Solution redirect to home page

Author: rostyslav-hymon

app/code/Magento/Paypal/Controller/Hostedpro/Cancel.php

@@ -1,15 +1,24 @@
 <?php
 /**
- *
  * Copyright © Magento, Inc. All rights reserved.
  * See COPYING.txt for license details.
  */
+declare(strict_types=1);
+
 namespace Magento\Paypal\Controller\Hostedpro;
 
+use Magento\Framework\App\Action\Action;
 use Magento\Framework\App\Action\Context;
+use Magento\Framework\App\Action\HttpGetActionInterface;
+use Magento\Framework\App\CsrfAwareActionInterface;
+use Magento\Framework\App\Request\InvalidRequestException;
+use Magento\Framework\App\RequestInterface;
 use Magento\Paypal\Helper\Checkout;
 
-class Cancel extends \Magento\Framework\App\Action\Action
+/**
+ * PayPal Hostedpro cancel controller.
+ */
+class Cancel extends Action implements CsrfAwareActionInterface, HttpGetActionInterface
 {
     /**
      * @var Checkout
@@ -40,4 +49,20 @@ public function execute()
 
         $this->_redirect('checkout', ['_fragment' => 'payment']);
     }
+
+    /**
+     * @inheritDoc
+     */
+    public function createCsrfValidationException(RequestInterface $request): ?InvalidRequestException
+    {
+        return null;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function validateForCsrf(RequestInterface $request): ?bool
+    {
+        return true;
+    }
 }

app/code/Magento/Paypal/Controller/Hostedpro/ReturnAction.php

@@ -1,12 +1,22 @@
 <?php
 /**
- *
  * Copyright © Magento, Inc. All rights reserved.
  * See COPYING.txt for license details.
  */
+declare(strict_types=1);
+
 namespace Magento\Paypal\Controller\Hostedpro;
 
-class ReturnAction extends \Magento\Framework\App\Action\Action
+use Magento\Framework\App\Action\Action;
+use Magento\Framework\App\Action\HttpPostActionInterface;
+use Magento\Framework\App\CsrfAwareActionInterface;
+use Magento\Framework\App\Request\InvalidRequestException;
+use Magento\Framework\App\RequestInterface;
+
+/**
+ * PayPal Hostedpro return controller.
+ */
+class ReturnAction extends Action implements CsrfAwareActionInterface, HttpPostActionInterface
 {
     /**
      * When a customer return to website from gateway.
@@ -21,4 +31,20 @@ public function execute()
             $this->_redirect('checkout/onepage/success');
         }
     }
+
+    /**
+     * @inheritDoc
+     */
+    public function createCsrfValidationException(RequestInterface $request): ?InvalidRequestException
+    {
+        return null;
+    }
+
+    /**
+     * @inheritDoc
+     */
+    public function validateForCsrf(RequestInterface $request): ?bool
+    {
+        return true;
+    }
 }