~edwargix/git.sr.ht

bffba93430cb9ba00e1cdac445d69dfe239bcd27 — Drew DeVault 7 years ago 2148de1
Add CSRF tokens
M gitsrht/templates/create.html => gitsrht/templates/create.html +1 -0
@@ 5,6 5,7 @@
    <section class="col-md-6">
      <h3 id="create">Create new repository</h3>
      <form method="POST" action="/create">
        {{csrf_token()}}
        <div class="form-group">
          <label for="name">Name</label>
          <input

M gitsrht/templates/settings_access.html => gitsrht/templates/settings_access.html +2 -0
@@ 29,6 29,7 @@
                repo.name
              }}/settings/access/revoke/{{ grant.id }}"
            >
              {{csrf_token()}}
              <button type="submit" class="btn btn-danger btn-fill">Revoke</button>
            </form>
          </td>


@@ 39,6 40,7 @@
    <h4>Grant Access</h4>
    {% endif %}
    <form method="POST">
      {{csrf_token()}}
      <div class="form-group">
        <label for="user">User</label>
        <input

M gitsrht/templates/settings_delete.html => gitsrht/templates/settings_delete.html +1 -0
@@ 8,6 8,7 @@
      This cannot be undone.
    </p>
    <form method="POST">
      {{csrf_token()}}
      <button type="submit" class="btn btn-danger">
        Proceed and delete {{icon("caret-right")}}
      </button>

M gitsrht/templates/settings_info.html => gitsrht/templates/settings_info.html +1 -0
@@ 3,6 3,7 @@
<div class="row">
  <div class="col-md-6">
    <form method="POST">
      {{csrf_token()}}
      <div class="form-group">
        <label for="name" style="display: block">
          Repository name

M gitsrht/templates/settings_rename.html => gitsrht/templates/settings_rename.html +1 -0
@@ 4,6 4,7 @@
  <div class="col-md-6">
    <h3>Rename Repository</h3>
    <form method="POST">
      {{csrf_token()}}
      <div class="form-group">
        <label for="name" style="display: block">
          New repository name: