From bad2825fab9f45f468414ed551bad9d987923600 Mon Sep 17 00:00:00 2001
From: Dan McGee <dan@archlinux.org>
Date: Sat, 5 Jun 2010 12:58:31 -0500
Subject: Updates for CSRF protection in Django 1.2.X

Signed-off-by: Dan McGee <dan@archlinux.org>
---
 templates/packages/details.html | 2 +-
 templates/packages/flag.html    | 2 +-
 templates/packages/search.html  | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

(limited to 'templates/packages')

diff --git a/templates/packages/details.html b/templates/packages/details.html
index f60324e8..247b6344 100644
--- a/templates/packages/details.html
+++ b/templates/packages/details.html
@@ -32,7 +32,7 @@ <h2>Package Details: {{ pkg.pkgname }} {{ pkg.pkgver }}-{{ pkg.pkgrel }}</h2>
         </ul>
 
         {% if user.is_authenticated %}
-        <form id="pkg-action" method="post" action="/packages/update/">
+        <form id="pkg-action" method="post" action="/packages/update/">{% csrf_token %}
             <div><input type="hidden" name="pkgid" value="{{ pkg.id }}" /></div>
             <p><input title="Adopt this package" type="submit" class="adopt" name="adopt" value="Adopt" />
             &nbsp;&nbsp;<input title="Orphan this package" type="submit" class="disown" name="disown" value="Disown" /></p>
diff --git a/templates/packages/flag.html b/templates/packages/flag.html
index 71d84982..9a5b123b 100644
--- a/templates/packages/flag.html
+++ b/templates/packages/flag.html
@@ -31,7 +31,7 @@ <h2>Flag Package: {{ pkg.pkgname }}</h2>
 
     <p>Please confirm your flag request for {{pkg.pkgname}}:</p>
 
-    <form id="flag-pkg-form" method="post" action=".">
+    <form id="flag-pkg-form" method="post" action=".">{% csrf_token %}
         <fieldset>
             {{ form.as_p }}
         </fieldset>
diff --git a/templates/packages/search.html b/templates/packages/search.html
index 6a22b7d8..6ed7f95f 100644
--- a/templates/packages/search.html
+++ b/templates/packages/search.html
@@ -69,7 +69,7 @@ <h3>Package Search</h3>
     </div>
     {% endif %}
 
-    <form id="pkglist-results-form" method="post" action="/packages/update/">
+    <form id="pkglist-results-form" method="post" action="/packages/update/">{% csrf_token %}
 
         <table class="results">
             <thead>
-- 
cgit v1.2.3-54-g00ecf