forked from 3wordchant/capsul-flask
implement anti-csrf measures in all posted forms
This commit is contained in:
@ -24,6 +24,7 @@
|
||||
<form id="delete_action" method="post">
|
||||
<input type="hidden" name="delete" value="True"/>
|
||||
<input type="hidden" name="are_you_sure" value="True"/>
|
||||
<input type="hidden" name="csrf-token" value="{{ csrf_token }}"/>
|
||||
<input type="submit" class="form-submit-link" value="Yes, Delete">
|
||||
</form>
|
||||
</div>
|
||||
@ -79,6 +80,7 @@
|
||||
<label class="align" for="delete_action">Actions</label>
|
||||
<form id="delete_action" method="post">
|
||||
<input type="hidden" name="delete" value="True"/>
|
||||
<input type="hidden" name="csrf-token" value="{{ csrf_token }}"/>
|
||||
<input type="submit" class="form-submit-link" value="Delete...">
|
||||
</form>
|
||||
</div>
|
||||
|
Reference in New Issue
Block a user