commit 15158e0171f359fd99a5f07264f3d7ffd8e93d96
author Akron <nils@diewald-online.de> Mon Mar 19 12:42:46 2018 +0100
committer Akron <nils@diewald-online.de> Mon Mar 19 12:42:46 2018 +0100
tree 3f35a940836dd42fe6a524a371d24e7187c102f5
parent 8bc6ed9a0d92f829dfa85c56b4466011b94ee947

Prevent csrf attacks on login

Change-Id: I9e6225f80136899e1ab90eac58d8206d2f7b1819

templates/layouts/main.html.ep

diff --git a/templates/layouts/main.html.ep b/templates/layouts/main.html.ep
index 83b637d..78ed722 100644
--- a/templates/layouts/main.html.ep
+++ b/templates/layouts/main.html.ep
@@ -33,6 +33,7 @@
 <fieldset>
   %= form_for 'login', class => 'login', begin
   <legend><span><%= loc 'login' %></span></legend>
+    %= csrf_field
     %= text_field 'handle_or_email', placeholder => loc('userormail')
     <div>
       %= password_field 'pwd', placeholder => loc('pwd')