Skip to content
This repository was archived by the owner on Jun 20, 2021. It is now read-only.

Commit 2a11bb8

Browse files
author
regisf
committed
Missing xsrf protection
1 parent d1c3071 commit 2a11bb8

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

templates/admin/users/delete.html

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,7 @@
1616
</div>
1717
<div class="uk-clearfix">
1818
<form action="/admin/users/delete/{{ username }}/" method="post">
19+
{% raw xsrf_form_html() %}
1920
<input type="hidden" name="username" value="{{ username }}" />
2021
<div class="uk-align-right">
2122
<input type="submit" value="Yes" class="uk-button uk-button-primary" />

0 commit comments

Comments
 (0)