Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CSRF Protection #2

Closed
billythekid opened this issue Mar 19, 2015 · 1 comment
Closed

CSRF Protection #2

billythekid opened this issue Mar 19, 2015 · 1 comment

Comments

@billythekid
Copy link

If a site has CSRF Protection enabled the form submissions always fail validation. Adding...
{{ getCsrfInput() }}
within the form tags in the form template files (_edit and _map in my testing - but any other forms I've not come across yet will need this too) is the fix.

eg. (in _edit.html - line 20 on)

{% block content %}
    <form method="post" accept-charset="UTF-8" data-saveshortcut="1">
        <input type="hidden" name="action" value="">
        {{ getCsrfInput() }}

        {% if feed.id %}<input type="hidden" name="feedId" value="{{ feed.id }}">{% endif %}
...
@engram-design
Copy link
Contributor

Thanks for reporting this - fixed in the latest commit.

elivz pushed a commit to elivz/feed-me that referenced this issue Dec 8, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants