remove csrf and add loginrequired

src/client/js/components/Page/PageShareManagement.jsx

@@ -28,7 +28,6 @@ const PageShareManagement = (props) => {
   async function exportPageHandler(format) {
     const { pageId, revisionId } = pageContainer.state;
     const url = new URL(urljoin(window.location.origin, '_api/v3/page/export', pageId));
-    url.searchParams.append('_csrf', appContainer.csrfToken);
     url.searchParams.append('format', format);
     url.searchParams.append('revisionId', revisionId);
     window.location.href = url.href;

src/server/routes/apiv3/page.js

@@ -198,7 +198,7 @@ module.exports = (crowi) => {
   *          200:
   *            description: Return page's markdown
   */
-  router.get('/export/:pageId', validator.export, async(req, res) => {
+  router.get('/export/:pageId', loginRequired, validator.export, async(req, res) => {
     const { pageId } = req.params;
     const { format, revisionId = null } = req.query;
     let revision;