From bad2825fab9f45f468414ed551bad9d987923600 Mon Sep 17 00:00:00 2001
From: Dan McGee <dan@archlinux.org>
Date: Sat, 5 Jun 2010 12:58:31 -0500
Subject: Updates for CSRF protection in Django 1.2.X

Signed-off-by: Dan McGee <dan@archlinux.org>
---
 templates/devel/index.html   | 2 +-
 templates/devel/profile.html | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

(limited to 'templates/devel')

diff --git a/templates/devel/index.html b/templates/devel/index.html
index 662e824..25429ec 100644
--- a/templates/devel/index.html
+++ b/templates/devel/index.html
@@ -60,7 +60,7 @@
         </tbody>
     </table>
 
-    <form id="dash-pkg-notify" method="post" action="/devel/notify/">
+    <form id="dash-pkg-notify" method="post" action="/devel/notify/">{% csrf_token %}
         <fieldset>
             <p><input id="notify" name="notify" type="checkbox" value="yes"
             {% if user.get_profile.notify %} checked="checked"{% endif %} />
diff --git a/templates/devel/profile.html b/templates/devel/profile.html
index 178a59a..2c1c658 100644
--- a/templates/devel/profile.html
+++ b/templates/devel/profile.html
@@ -6,7 +6,7 @@
 
     <h2>Developer Profile</h2>
 
-    <form id="edit-profile-form" method="post" action=".">
+    <form id="edit-profile-form" method="post" action=".">{% csrf_token %}
         <fieldset>
             <legend>Username: <strong>{{ user.username }}</strong></legend>
             {{ form.as_p }}
-- 
cgit v1.2.3-24-g4f1b