nyaa-pantsu/templates/_csrf_protect.html

{{ define "csrf_field"}}
<input type="hidden" name="csrf_token" value="{{ .CsrfToken }}">
{{end}}
CSRF Support + better key for context * Added new dep: gorilla/csrf * CSRF field in forms * CSRF variable in commontemplatevariables * New key for messages and user context Please change EnableSecureCSRF to false when testing locally and don't merge config/env.go with the changes 2017-05-29 17:07:18 +02:00			`{{ define "csrf_field"}}`
Fix for csrf (#923) * Merge remote-tracking branch 'refs/remotes/origin/dev' into fix-for-csrf Fix CSRF protection Seems like it doesn't work anymore... I tried to fix it but couldn't get /api without csrf. So I changed the dependency for another csrf package (nosurf). Behavior: Same as previously. You just have to include the block csrf_token * changing dependency to nosurf 2017-06-05 03:33:48 +02:00			`<input type="hidden" name="csrf_token" value="{{ .CsrfToken }}">`
CSRF Support + better key for context * Added new dep: gorilla/csrf * CSRF field in forms * CSRF variable in commontemplatevariables * New key for messages and user context Please change EnableSecureCSRF to false when testing locally and don't merge config/env.go with the changes 2017-05-29 17:07:18 +02:00			`{{end}}`