diff options
| author | Rose Hogenson <rosehogenson@posteo.net> | 2025-10-14 11:50:58 -0700 |
|---|---|---|
| committer | Rose Hogenson <rosehogenson@posteo.net> | 2025-10-14 11:50:58 -0700 |
| commit | ae0e116d90cc9b2e7e268e497a7838bc756e2087 (patch) | |
| tree | b6e759ca2d9491225abf4679d9817425a76ba956 /templates | |
| parent | 21d7462b057838eb173145d79d2b9fd6c71e8053 (diff) | |
| download | roseh.moe-ae0e116d90cc9b2e7e268e497a7838bc756e2087.tar.zst | |
Revert "Remove CSRF tokens"
This reverts commit 21d7462b057838eb173145d79d2b9fd6c71e8053.
This was a great idea, but tanjiro is still on Go 1.24
Diffstat (limited to 'templates')
| -rw-r--r-- | templates/login.html.template | 1 | ||||
| -rw-r--r-- | templates/note.html.template | 1 |
2 files changed, 2 insertions, 0 deletions
diff --git a/templates/login.html.template b/templates/login.html.template index 0cf3469..f08caf7 100644 --- a/templates/login.html.template +++ b/templates/login.html.template @@ -5,6 +5,7 @@ <p class="login-error">Incorrect password</p> {{end}} <form class="password-form" action="/login" method="post"> + <input type="hidden" name="csrf-token" value="{{.CSRFToken}}"> <label class="password-label" for="password">Enter password</label> <input id="password" class="password" type="password" name="password" autofocus> </form> diff --git a/templates/note.html.template b/templates/note.html.template index 19da416..07c2d8e 100644 --- a/templates/note.html.template +++ b/templates/note.html.template @@ -6,6 +6,7 @@ {{end}} <form id="form" method="post"> + <input type="hidden" name="csrf-token" value="{{.CSRFToken}}"> <div class="save-indicator-container"> {{block "saveIndicator" ""}} <span id="save-indicator">{{.}}</span> |