diff options
| author | Dan McGee <dan@archlinux.org> | 2010-06-05 19:58:31 +0200 |
|---|---|---|
| committer | Dan McGee <dan@archlinux.org> | 2010-06-05 19:58:31 +0200 |
| commit | bad2825fab9f45f468414ed551bad9d987923600 (patch) | |
| tree | 8e91d017ddbe2f28416395cb43f70644d509bd9f /templates/packages | |
| parent | 7646f8ea7ce19b404a0e57c85e5dd589b3a53371 (diff) | |
| download | archweb-bad2825fab9f45f468414ed551bad9d987923600.tar.gz archweb-bad2825fab9f45f468414ed551bad9d987923600.tar.xz | |
Updates for CSRF protection in Django 1.2.X
Signed-off-by: Dan McGee <dan@archlinux.org>
Diffstat (limited to 'templates/packages')
| -rw-r--r-- | templates/packages/details.html | 2 | ||||
| -rw-r--r-- | templates/packages/flag.html | 2 | ||||
| -rw-r--r-- | templates/packages/search.html | 2 |
3 files changed, 3 insertions, 3 deletions
diff --git a/templates/packages/details.html b/templates/packages/details.html index f60324e..247b634 100644 --- a/templates/packages/details.html +++ b/templates/packages/details.html @@ -32,7 +32,7 @@ </ul> {% if user.is_authenticated %} - <form id="pkg-action" method="post" action="/packages/update/"> + <form id="pkg-action" method="post" action="/packages/update/">{% csrf_token %} <div><input type="hidden" name="pkgid" value="{{ pkg.id }}" /></div> <p><input title="Adopt this package" type="submit" class="adopt" name="adopt" value="Adopt" /> <input title="Orphan this package" type="submit" class="disown" name="disown" value="Disown" /></p> diff --git a/templates/packages/flag.html b/templates/packages/flag.html index 71d8498..9a5b123 100644 --- a/templates/packages/flag.html +++ b/templates/packages/flag.html @@ -31,7 +31,7 @@ <p>Please confirm your flag request for {{pkg.pkgname}}:</p> - <form id="flag-pkg-form" method="post" action="."> + <form id="flag-pkg-form" method="post" action=".">{% csrf_token %} <fieldset> {{ form.as_p }} </fieldset> diff --git a/templates/packages/search.html b/templates/packages/search.html index 6a22b7d..6ed7f95 100644 --- a/templates/packages/search.html +++ b/templates/packages/search.html @@ -69,7 +69,7 @@ </div> {% endif %} - <form id="pkglist-results-form" method="post" action="/packages/update/"> + <form id="pkglist-results-form" method="post" action="/packages/update/">{% csrf_token %} <table class="results"> <thead> |