summaryrefslogtreecommitdiffstats
path: root/templates/login.html.template
diff options
context:
space:
mode:
authorRose Hogenson <rosehogenson@posteo.net>2025-10-14 11:50:58 -0700
committerRose Hogenson <rosehogenson@posteo.net>2025-10-14 11:50:58 -0700
commitae0e116d90cc9b2e7e268e497a7838bc756e2087 (patch)
treeb6e759ca2d9491225abf4679d9817425a76ba956 /templates/login.html.template
parentRemove CSRF tokens (diff)
downloadroseh.moe-ae0e116d90cc9b2e7e268e497a7838bc756e2087.tar.zst
Revert "Remove CSRF tokens"
This reverts commit 21d7462b057838eb173145d79d2b9fd6c71e8053. This was a great idea, but tanjiro is still on Go 1.24
Diffstat (limited to 'templates/login.html.template')
-rw-r--r--templates/login.html.template1
1 files changed, 1 insertions, 0 deletions
diff --git a/templates/login.html.template b/templates/login.html.template
index 0cf3469..f08caf7 100644
--- a/templates/login.html.template
+++ b/templates/login.html.template
@@ -5,6 +5,7 @@
<p class="login-error">Incorrect password</p>
{{end}}
<form class="password-form" action="/login" method="post">
+ <input type="hidden" name="csrf-token" value="{{.CSRFToken}}">
<label class="password-label" for="password">Enter password</label>
<input id="password" class="password" type="password" name="password" autofocus>
</form>