Add global CSRF protection

2016-12-14 18:37:17 -06:00 · 2016-12-14 18:37:17 -06:00 · 4ed522ae47
commit 4ed522ae47
parent ab09314ed3
15 changed files with 28 additions and 22 deletions
--- a/tailbone/templates/master/delete.mako
+++ b/tailbone/templates/master/delete.mako
@ -36,6 +36,7 @@
  <br />

  ${h.form(request.current_route_url())}
+  ${h.csrf_token(request)}
    <div class="buttons">
      <a class="button" href="${form.cancel_url}">Whoops, nevermind...</a>
      <button type="button" id="confirm-delete">Yes, please DELETE this data forever!</button>