From bad2825fab9f45f468414ed551bad9d987923600 Mon Sep 17 00:00:00 2001
From: Dan McGee <dan@archlinux.org>
Date: Sat, 5 Jun 2010 12:58:31 -0500
Subject: Updates for CSRF protection in Django 1.2.X

Signed-off-by: Dan McGee <dan@archlinux.org>
---
 templates/news/add.html    | 2 +-
 templates/news/delete.html | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

(limited to 'templates/news')

diff --git a/templates/news/add.html b/templates/news/add.html
index 38b5b21..04a5568 100644
--- a/templates/news/add.html
+++ b/templates/news/add.html
@@ -10,7 +10,7 @@
     <h2>News: Add Article</h2>
     {% endif %}
 
-    <form id="newsform" method="post" action=".">
+    <form id="newsform" method="post" action=".">{% csrf_token %}
         <fieldset>
             {{ form.as_p }}
         </fieldset>
diff --git a/templates/news/delete.html b/templates/news/delete.html
index 6a2fa1e..3e3ba95 100644
--- a/templates/news/delete.html
+++ b/templates/news/delete.html
@@ -14,7 +14,7 @@
 
     <p>Are you sure?</p>
 
-    <form method="post" action=".">
+    <form method="post" action=".">{% csrf_token %}
         <input title="Delete this article" id="delete" name="delete"
         type="submit" value="Delete" /></p>
     </form>
-- 
cgit v1.2.3-24-g4f1b