From f0e10dc93f400e8ba979760a1c7af9d6e53cd1ef Mon Sep 17 00:00:00 2001
From: Vitaly Takmazov
Date: Tue, 20 Dec 2022 02:21:22 +0300
Subject: Do not use multipart forms where possible

* Pass csrf token as parameter to multipart form
---
 src/main/resources/templates/views/settings_about.html | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

(limited to 'src/main/resources/templates/views/settings_about.html')

diff --git a/src/main/resources/templates/views/settings_about.html b/src/main/resources/templates/views/settings_about.html
index 94cd9058..846a3d11 100644
--- a/src/main/resources/templates/views/settings_about.html
+++ b/src/main/resources/templates/views/settings_about.html
@@ -1,8 +1,7 @@
 {% extends "layouts/default" %}
 {% block content %}
 <article>
-    <form action="/settings" method="POST" enctype="multipart/form-data">
-        <input type="hidden" name="{{_csrf.parameterName}}" value="{{_csrf.token}}" />
+    <form action="/settings?{{_csrf.parameterName}}={{_csrf.token}}" method="POST" enctype="multipart/form-data">
         <p>Full name: <input type="text" name="fullname" value="{{ userinfo.fullName }}"/></p>
         <p>Country: <input type="text" name="country" value="{{ userinfo.country }}"/></p>
         <p>URL: <input type="text" name="url" value="{{ userinfo.url }}" size="32"/><br/>
-- 
cgit v1.2.3