add CSRF validation

2021-12-21 16:57:39 +01:00 · 2021-12-21 16:57:39 +01:00 · e32089c81e
commit e32089c81e
parent ae5a18138b
5 changed files with 21 additions and 1 deletions
--- a/ldap_frontend/templates/login.html
+++ b/ldap_frontend/templates/login.html
@ -1,6 +1,7 @@
 {% extends "layout/default.html" %}
 {% block content %}
            <form action="{{ url_for("login") }}" method="post">
+                <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
                <fieldset>
                    <legend>Login</legend>