feat(webui): add csrf tokens to all forms processing code

Closes #60
2025-05-01 08:37:28 +02:00 · 2025-05-01 08:37:28 +02:00 · 5d7b540718
commit 5d7b540718
parent 895615ad6e
15 changed files with 71 additions and 2 deletions
--- a/pkg/webui/html/accountsIdResetPassword.html
+++ b/pkg/webui/html/accountsIdResetPassword.html
@ -8,6 +8,7 @@
 <h1>User Account</h1>
 <h2>Password Reset</h2>
 <form action="/accounts/{{ .Account.Id }}/reset/{{ .Token }}" enctype="multipart/form-data" method="post">
+  <input name="csrf_token" type="hidden" value="{{ .Page.Session.Data.CsrfToken }}">
  <fieldset>
    <legend>Set Password</legend>
    <p>