Remove action when submitting to same URL
It looks like the `action="."` business was screwing up some browsers, notably lynx and links. We don't need it as the default is to submit to the same page anyway, so kill this gunk and see if it fixes a login CSRF issue. Signed-off-by: Dan McGee <dan@archlinux.org>
This commit is contained in:
parent
408288719e
commit
b3059dd3e8
@ -6,7 +6,7 @@
|
||||
|
||||
<h2>Developer Profile</h2>
|
||||
|
||||
<form id="edit-profile-form" method="post" action=".">{% csrf_token %}
|
||||
<form id="edit-profile-form" method="post">{% csrf_token %}
|
||||
<fieldset>
|
||||
<legend>Username: <strong>{{ user.username }}</strong></legend>
|
||||
{{ form.as_p }}
|
||||
|
@ -8,7 +8,7 @@ <h2>{{title}}</h2>
|
||||
|
||||
{% if description %}{{description}}{% endif %}
|
||||
|
||||
<form class="general-form" method="post" action=".">{% csrf_token %}
|
||||
<form class="general-form" method="post">{% csrf_token %}
|
||||
<fieldset>
|
||||
{% for field in form %}
|
||||
<p><label>{{field.label}}{% if field.help_text %}:</label><br />
|
||||
|
@ -13,7 +13,7 @@ <h2>Pacman Mirrorlist Generator</h2>
|
||||
Simply replace the contents of <code>/etc/pacman.d/mirrorlist</code> with
|
||||
the generated code.</p>
|
||||
|
||||
<form id="list-generator" method="post" action=".">{% csrf_token %}
|
||||
<form id="list-generator" method="post">{% csrf_token %}
|
||||
{{ mirrorlist_form.as_p }}
|
||||
<p><label></label> <input type="submit" value="Generate List" /></p>
|
||||
</form>
|
||||
|
@ -10,7 +10,7 @@ <h2>News: Edit Article</h2>
|
||||
<h2>News: Add Article</h2>
|
||||
{% endif %}
|
||||
|
||||
<form id="newsform" method="post" action=".">{% csrf_token %}
|
||||
<form id="newsform" method="post">{% csrf_token %}
|
||||
<fieldset>
|
||||
{{ form.as_p }}
|
||||
</fieldset>
|
||||
|
@ -14,7 +14,7 @@ <h2>News: Delete Entry Confirmation</h2>
|
||||
|
||||
<p>Are you sure?</p>
|
||||
|
||||
<form method="post" action=".">{% csrf_token %}
|
||||
<form method="post">{% csrf_token %}
|
||||
<input title="Delete this article" id="delete" name="delete"
|
||||
type="submit" value="Delete" /></p>
|
||||
</form>
|
||||
|
@ -31,7 +31,7 @@ <h2>Flag Package: {{ pkg.pkgname }}</h2>
|
||||
|
||||
<p>Please confirm your flag request for {{pkg.pkgname}}:</p>
|
||||
|
||||
<form id="flag-pkg-form" method="post" action=".">{% csrf_token %}
|
||||
<form id="flag-pkg-form" method="post">{% csrf_token %}
|
||||
<fieldset>
|
||||
{{ form.as_p }}
|
||||
</fieldset>
|
||||
|
@ -10,7 +10,7 @@ <h2>Developer Login</h2>
|
||||
<p class="login-error">Your username and password didn't match. Please try again.</p>
|
||||
{% endif %}
|
||||
|
||||
<form id="dev-login-form" method="post" action=".">{% csrf_token %}
|
||||
<form id="dev-login-form" method="post">{% csrf_token %}
|
||||
<fieldset>
|
||||
<legend>Enter login credentials</legend>
|
||||
{{ form.as_p }}
|
||||
|
@ -14,7 +14,7 @@ <h2>Delete Todo List: {{object.name}}</h2>
|
||||
|
||||
<p>Are you sure?</p>
|
||||
|
||||
<form id="delete-todo-form" method="post" action=".">{% csrf_token %}
|
||||
<form id="delete-todo-form" method="post">{% csrf_token %}
|
||||
<p><input type="submit" value="Delete" /></p>
|
||||
</form>
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user