rattail/tailbone
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

Fix CSRF token bug for bulk-move message forms

Browse source
This commit is contained in:
Lance Edgar 2016-12-28 14:51:16 -06:00
parent e0865bef12
commit de38c3a20a
2 changed files with 8 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
tailbone/templates/messages/archive/index.mako
View file

@ -18,9 +18,10 @@
<%def name="grid_tools()">
${h.form(url('messages.move_bulk'), name='move-selected')}
${h.hidden('destination', value='inbox')}
${h.hidden('uuids')}
<button type="submit">Move 0 selected to Inbox</button>
${h.csrf_token(request)}
${h.hidden('destination', value='inbox')}
${h.hidden('uuids')}
<button type="submit">Move 0 selected to Inbox</button>
${h.end_form()}
</%def>

7
tailbone/templates/messages/inbox/index.mako
View file

@ -18,9 +18,10 @@
<%def name="grid_tools()">
${h.form(url('messages.move_bulk'), name='move-selected')}
${h.hidden('destination', value='archive')}
${h.hidden('uuids')}
<button type="submit">Move 0 selected to Archive</button>
${h.csrf_token(request)}
${h.hidden('destination', value='archive')}
${h.hidden('uuids')}
<button type="submit">Move 0 selected to Archive</button>
${h.end_form()}
</%def>