Add global CSRF protection

2016-12-14 18:37:17 -06:00 · 2016-12-14 18:37:17 -06:00 · 4ed522ae47
commit 4ed522ae47
parent ab09314ed3
15 changed files with 28 additions and 22 deletions
--- a/tailbone/templates/feedback.mako
+++ b/tailbone/templates/feedback.mako
@ -23,6 +23,7 @@

 <div class="form">
  ${form.begin()}
+  ${form.csrf_token()}
  ${form.hidden('user', value=request.user.uuid if request.user else None)}

  <p>