Add missing CSRF token to password change form

1 files changed, 2 insertions, 1 deletions

diff --git a/src/main/resources/templates/views/settings_password.html b/src/main/resources/templates/views/settings_password.html
index 99c1676e..c09a97dd 100644
--- a/src/main/resources/templates/views/settings_password.html
+++ b/src/main/resources/templates/views/settings_password.html
@@ -4,6 +4,7 @@
     <fieldset>
         <legend>Changing your password</legend>
         <form action="/settings" method="post">
+            <input type="hidden" name="{{_csrf.parameterName}}" value="{{_csrf.token}}" />
             <input type="hidden" name="page" value="password"/>
             <p>Change password: <input type="password" name="password" size="8"/> <input class="Button" type="submit"
                                                                                          value="  Update  "/><br/>
@@ -14,4 +15,4 @@
 {% endblock %}
 {% block "column" %}
 {% include "views/partial/settings_tabs" %}
-{% endblock %}
\ No newline at end of file
+{% endblock %}