summaryrefslogtreecommitdiffstats
path: root/templates/login.html.template
diff options
context:
space:
mode:
authorRose Hogenson <rosehogenson@posteo.net>2025-10-14 11:46:56 -0700
committerRose Hogenson <rosehogenson@posteo.net>2025-10-14 11:46:56 -0700
commit21d7462b057838eb173145d79d2b9fd6c71e8053 (patch)
tree906573ab446f6f62fa24c566529e3e415a3b746c /templates/login.html.template
parentValidate that secrets were loaded (diff)
downloadroseh.moe-21d7462b057838eb173145d79d2b9fd6c71e8053.tar.zst
Remove CSRF tokens
I think the built-in cross-origin protection will be good enough.
Diffstat (limited to 'templates/login.html.template')
-rw-r--r--templates/login.html.template1
1 files changed, 0 insertions, 1 deletions
diff --git a/templates/login.html.template b/templates/login.html.template
index f08caf7..0cf3469 100644
--- a/templates/login.html.template
+++ b/templates/login.html.template
@@ -5,7 +5,6 @@
<p class="login-error">Incorrect password</p>
{{end}}
<form class="password-form" action="/login" method="post">
- <input type="hidden" name="csrf-token" value="{{.CSRFToken}}">
<label class="password-label" for="password">Enter password</label>
<input id="password" class="password" type="password" name="password" autofocus>
</form>