gaspersic/freeCodeCamp
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Add CSRF input to Account Delete form.

Browse Source
This commit is contained in:
Sahat Yalkabov
2014-02-07 23:41:15 -05:00
parent db50b485da
commit 1143ac4320
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
views/account/profile.jade
View File

@ -56,7 +56,7 @@ block content
.col-sm-4 .col-sm-4
input.form-control(type='password', name='confirmPassword', id='confirmPassword') input.form-control(type='password', name='confirmPassword', id='confirmPassword')
.form-group .form-group
input.form-control(type='hidden', name='_csrf', value=token) input.form-control(type='hidden', name='_csrf', value=token)
.form-group .form-group
.col-sm-offset-3.col-sm-4 .col-sm-offset-3.col-sm-4
button.btn.btn.btn-primary(type='submit') button.btn.btn.btn-primary(type='submit')
@ -68,6 +68,7 @@ block content
p You can delete your account, but keep in mind this action is irreversible. p You can delete your account, but keep in mind this action is irreversible.
form(action='/account/delete', method='POST') form(action='/account/delete', method='POST')
input(type='hidden', name='_csrf', value=token)
button.btn.btn-danger(type='submit') button.btn.btn-danger(type='submit')
i.fa.fa-trash-o i.fa.fa-trash-o
| Delete my account | Delete my account