feature: csrf protection

2026-01-16 03:11:30 +01:00 · 2023-09-16 09:23:51 +02:00
parent 046c0b5cf4
commit 0e33fd103c
72 changed files with 332 additions and 39 deletions
--- a/system/templates/guilds.back_button.html.twig
+++ b/system/templates/guilds.back_button.html.twig
@@ -3,6 +3,7 @@
 {% endif %}
 <div style="text-align:center">
 	<form action="{% if action is not defined %}{{ getLink('guilds') }}{% else %}{{ action }}{% endif %}" method="post">
+		{{ csrf() }}
 		{{ include('buttons.back.html.twig') }}
 	</form>
-</div>
+</div>