Add initial support for CSRF token protection

2016-12-14 15:41:15 -06:00 · 2016-12-14 15:41:15 -06:00 · ab09314ed3
commit ab09314ed3
parent 11e78adaab
8 changed files with 61 additions and 6 deletions
--- a/tailbone/templates/purchases/batches/receive_form.mako
+++ b/tailbone/templates/purchases/batches/receive_form.mako
@ -326,6 +326,7 @@

 <div class="form-wrapper">
  ${form.begin(id='receiving-form')}
+  ${form.csrf_token()}
  ${h.hidden('mode')}
  ${h.hidden('expiration_date')}
  ${h.hidden('ordered_product')}