Enable the CSRF check for the login page

2018-06-01 21:54:43 +02:00
parent 8af33d866d
commit 2befde27d5
3 changed files with 5 additions and 2 deletions
--- a/templates/login.html
+++ b/templates/login.html
@@ -8,6 +8,7 @@
 	{% if session.logged_in %}logged{% else%}not logged{%endif%}

 <form id="login-form" method="POST">
+	 <input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
 	<input type="password" name="pass" placeholder="password">
 	{% if u2f_enabled %}
 	<input type="hidden" name="resp" id="sig-payload" value="">