diff --git a/views/account/forgot.jade b/views/account/forgot.jade index 70029f16b8..a843a1e95b 100644 --- a/views/account/forgot.jade +++ b/views/account/forgot.jade @@ -4,7 +4,7 @@ block content .col-sm-8.col-sm-offset-2 form(method='POST') legend Forgot Password - input(type='hidden', name='_csrf', value=token) + input(type='hidden', name='_csrf', value=_csrf) .form-group p Enter your email address below and we will send you password reset instructions. label.control-label(for='email') Email diff --git a/views/account/login.jade b/views/account/login.jade index 5869ee6a31..5f827b4979 100644 --- a/views/account/login.jade +++ b/views/account/login.jade @@ -3,7 +3,7 @@ extends ../layout block content form(method='POST') legend Sign In - input(type='hidden', name='_csrf', value=token) + input(type='hidden', name='_csrf', value=_csrf) .col-sm-8.col-sm-offset-2 if secrets.localAuth .form-group diff --git a/views/account/profile.jade b/views/account/profile.jade index 047d077389..39c73cb2d9 100644 --- a/views/account/profile.jade +++ b/views/account/profile.jade @@ -5,7 +5,7 @@ block content h3 Profile Information form.form-horizontal(action='/account/profile', method='POST') - input(type='hidden', name='_csrf', value=token) + input(type='hidden', name='_csrf', value=_csrf) .form-group label.col-sm-2.control-label(for='email') Email .col-sm-4 @@ -47,7 +47,7 @@ block content h3 Change Password form.form-horizontal(action='/account/password', method='POST') - input(type='hidden', name='_csrf', value=token) + input(type='hidden', name='_csrf', value=_csrf) .form-group label.col-sm-3.control-label(for='password') New Password .col-sm-4 diff --git a/views/account/reset.jade b/views/account/reset.jade index 520642fad7..ac5e88584b 100644 --- a/views/account/reset.jade +++ b/views/account/reset.jade @@ -4,7 +4,7 @@ block content .col-sm-8.col-sm-offset-2 form(method='POST') legend Reset Password - input(type='hidden', name='_csrf', value=token) + input(type='hidden', name='_csrf', value=_csrf) .form-group label(for='password') New Password input.form-control(type='password', name='password', value='', placeholder='New password', autofocus=true) diff --git a/views/account/signup.jade b/views/account/signup.jade index a2a8be6681..ee8c0a0b2b 100644 --- a/views/account/signup.jade +++ b/views/account/signup.jade @@ -2,7 +2,7 @@ extends ../layout block content form.form-horizontal(id='signup-form', method='POST') - input(type='hidden', name='_csrf', value=token) + input(type='hidden', name='_csrf', value=_csrf) legend Signup .form-group label.col-sm-3.control-label(for='email') Email diff --git a/views/api/clockwork.jade b/views/api/clockwork.jade index 5b07fb9f1b..1bff65240d 100644 --- a/views/api/clockwork.jade +++ b/views/api/clockwork.jade @@ -18,7 +18,7 @@ block content .row .col-sm-6 form(role='form', method='POST') - input(type='hidden', name='_csrf', value=token) + input(type='hidden', name='_csrf', value=_csrf) .form-group .input-group input.form-control(type='text', name='telephone', placeholder='Phone Number (international format)') diff --git a/views/api/twilio.jade b/views/api/twilio.jade index af529ed103..e5e1cf035b 100644 --- a/views/api/twilio.jade +++ b/views/api/twilio.jade @@ -21,7 +21,7 @@ block content .row .col-sm-6 form(role='form', method='POST') - input(type='hidden', name='_csrf', value=token) + input(type='hidden', name='_csrf', value=_csrf) .form-group .input-group input.form-control(type='text', name='telephone', placeholder='Phone Number') diff --git a/views/api/venmo.jade b/views/api/venmo.jade index 46b8f12cfd..9010b10693 100644 --- a/views/api/venmo.jade +++ b/views/api/venmo.jade @@ -42,7 +42,7 @@ block content .col-sm-5 h3 Make Payment form(role='form', method='POST') - input(type='hidden', name='_csrf', value=token) + input(type='hidden', name='_csrf', value=_csrf) .form-group label.control-label(for='user') Phone, Email or Venmo User ID input.form-control(type='text', name='user', id='user', placeholder='15555555555', autofocus=true) diff --git a/views/contact.jade b/views/contact.jade index 2b8a301434..cf54ffe8d0 100644 --- a/views/contact.jade +++ b/views/contact.jade @@ -5,7 +5,7 @@ block content h3 Contact Form form.form-horizontal(role='form', method='POST') - input(type='hidden', name='_csrf', value=token) + input(type='hidden', name='_csrf', value=_csrf) .form-group label(class='col-sm-2 control-label', for='name') Name .col-sm-8 diff --git a/views/layout.jade b/views/layout.jade index b3980e41c4..61769a9602 100644 --- a/views/layout.jade +++ b/views/layout.jade @@ -5,6 +5,7 @@ html meta(http-equiv='X-UA-Compatible', content='IE=edge') meta(name='viewport', content='width=device-width, initial-scale=1.0') meta(name='description', content='') + meta(name='csrf-token', content=_csrf) meta(name='author', content='') title #{title} | Hackathon Starter != css('styles')