diff options
author | r <r@freesoftwareextremist.com> | 2020-01-25 10:07:06 +0000 |
---|---|---|
committer | r <r@freesoftwareextremist.com> | 2020-01-26 06:49:29 +0000 |
commit | bf2cfaf0ede0e9744408f52538fb4bcd87a6d5b8 (patch) | |
tree | 5d3be1dfa65395bddedd2fb6f06a990c23274f00 /templates/settings.tmpl | |
parent | 5fdc7a59b2efc60e35f5421e28986c356810456e (diff) | |
download | bloat-bf2cfaf0ede0e9744408f52538fb4bcd87a6d5b8.tar.gz bloat-bf2cfaf0ede0e9744408f52538fb4bcd87a6d5b8.zip |
Add CSRF protection
Diffstat (limited to 'templates/settings.tmpl')
-rw-r--r-- | templates/settings.tmpl | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/templates/settings.tmpl b/templates/settings.tmpl index a32a1b0..e7d49e9 100644 --- a/templates/settings.tmpl +++ b/templates/settings.tmpl @@ -4,6 +4,7 @@ <div class="page-title"> Settings </div> <form id="settings-form" action="/settings" method="POST"> + <input type="hidden" name="csrf_token" value="{{$.Ctx.CSRFToken}}"> <div class="settings-form-field"> <label for="visibility"> Default scope </label> <select id="visibility" name="visibility"> |