Add CSRF protection to every form that changes data. · 41c46a43c6 - xxx - Gitea on treehouse.org.za

tim/xxx

Add CSRF protection to every form that changes data.

The logout link carries the token too, and the cookies get SameSite=Lax.

This commit is contained in:

tim

2026-09-25 21:38:22 +02:00

parent f6bdf10228

commit 41c46a43c6

9 changed files with 53 additions and 5 deletions

									
										publish/write.inc.php
									
		+1
		
												View File
												
				@@ -21,6 +21,7 @@ if (count($validate) !== 0) {

				?>

				<form id="write" method="post" enctype="multipart/form-data" onsubmit="return review()" action="">

				<?= csrf_field() ?>

				<div class="grid">