From b1bbebb4d68fdcab82015c4cbc5e5e3e26e4b8c1 Mon Sep 17 00:00:00 2001
From: Vitaly Takmazov
Date: Sat, 3 Dec 2022 13:22:33 +0300
Subject: Add missing CSRF token to password change form

---
 src/main/resources/templates/views/settings_password.html | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'src/main/resources')

diff --git a/src/main/resources/templates/views/settings_password.html b/src/main/resources/templates/views/settings_password.html
index 99c1676e..c09a97dd 100644
--- a/src/main/resources/templates/views/settings_password.html
+++ b/src/main/resources/templates/views/settings_password.html
@@ -4,6 +4,7 @@
     <fieldset>
         <legend>Changing your password</legend>
         <form action="/settings" method="post">
+            <input type="hidden" name="{{_csrf.parameterName}}" value="{{_csrf.token}}" />
             <input type="hidden" name="page" value="password"/>
             <p>Change password: <input type="password" name="password" size="8"/> <input class="Button" type="submit"
                                                                                          value="  Update  "/><br/>
@@ -14,4 +15,4 @@
 {% endblock %}
 {% block "column" %}
 {% include "views/partial/settings_tabs" %}
-{% endblock %}
\ No newline at end of file
+{% endblock %}
-- 
cgit v1.2.3