feat(webui): add csrf tokens to all forms processing code

Closes #60
2025-05-01 08:37:28 +02:00 · 2025-05-01 08:37:28 +02:00 · 5d7b540718
commit 5d7b540718
parent 895615ad6e
15 changed files with 71 additions and 2 deletions
--- a/pkg/webui/html/statesId.html
+++ b/pkg/webui/html/statesId.html
@ -24,6 +24,7 @@
 <h2>Operations</h2>
 <div class="flex-row">
  <form action="/states/{{ .State.Id }}" method="post">
+    <input name="csrf_token" type="hidden" value="{{ .Page.Session.Data.CsrfToken }}">
    <fieldset>
      <legend>Edit State</legend>
      <div class="flex-row">
@ -60,6 +61,7 @@
    </fieldset>
  </form>
  <form action="/states/{{ .State.Id }}" method="post">
+    <input name="csrf_token" type="hidden" value="{{ .Page.Session.Data.CsrfToken }}">
    <fieldset>
      <legend>Danger Zone</legend>
      <button action="delete" type="submit" value="delete">Delete State</button>