implement anti-csrf measures in all posted forms

2020-05-22 16:04:47 -05:00
parent 2b0ff06ec8
commit fd7dd7390f
5 changed files with 35 additions and 6 deletions
--- a/capsulflask/templates/create-capsul.html
+++ b/capsulflask/templates/create-capsul.html
@ -37,6 +37,7 @@
  {% else %}

    <form method="post">
+      <input type="hidden" name="csrf-token" value="{{ csrf_token }}"/>
      <div class="row justify-start">
        <label class="align"  for="size">Capsul Size</label>
        <select id="size" name="size">