diff options
| author | Dan McGee <dan@archlinux.org> | 2010-06-05 19:58:31 +0200 |
|---|---|---|
| committer | Dan McGee <dan@archlinux.org> | 2010-06-05 19:58:31 +0200 |
| commit | bad2825fab9f45f468414ed551bad9d987923600 (patch) | |
| tree | 8e91d017ddbe2f28416395cb43f70644d509bd9f /templates/news | |
| parent | 7646f8ea7ce19b404a0e57c85e5dd589b3a53371 (diff) | |
| download | archweb-bad2825fab9f45f468414ed551bad9d987923600.tar.gz archweb-bad2825fab9f45f468414ed551bad9d987923600.tar.xz | |
Updates for CSRF protection in Django 1.2.X
Signed-off-by: Dan McGee <dan@archlinux.org>
Diffstat (limited to 'templates/news')
| -rw-r--r-- | templates/news/add.html | 2 | ||||
| -rw-r--r-- | templates/news/delete.html | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/templates/news/add.html b/templates/news/add.html index 38b5b21..04a5568 100644 --- a/templates/news/add.html +++ b/templates/news/add.html @@ -10,7 +10,7 @@ <h2>News: Add Article</h2> {% endif %} - <form id="newsform" method="post" action="."> + <form id="newsform" method="post" action=".">{% csrf_token %} <fieldset> {{ form.as_p }} </fieldset> diff --git a/templates/news/delete.html b/templates/news/delete.html index 6a2fa1e..3e3ba95 100644 --- a/templates/news/delete.html +++ b/templates/news/delete.html @@ -14,7 +14,7 @@ <p>Are you sure?</p> - <form method="post" action="."> + <form method="post" action=".">{% csrf_token %} <input title="Delete this article" id="delete" name="delete" type="submit" value="Delete" /></p> </form> |