Add missing csrf token to board/thread for modactions in mod view

merge-requests/208/head
fatchan 4 years ago
parent b4cfbe572d
commit 644d76700f
  1. 2
      views/pages/board.pug
  2. 2
      views/pages/thread.pug

@ -22,6 +22,8 @@ block content
include ../includes/boardpages.pug
+boardnav(null, false, false)
form(action=`/forms/board/${board._id}/${modview ? 'mod' : ''}actions` method='POST' enctype='application/x-www-form-urlencoded')
if modview
input(type='hidden' name='_csrf' value=csrf)
hr(size=1)
if threads.length === 0
p No posts.

@ -42,6 +42,8 @@ block content
+boardnav(null, true, true)
- const uids = board.settings.ids ? new Set() : void 0;
form(action=`/forms/board/${board._id}/${modview ? 'mod' : ''}actions` method='POST' enctype='application/x-www-form-urlencoded')
if modview
input(type='hidden' name='_csrf' value=csrf)
hr(size=1)
.thread
- uids && thread.userId && uids.add(thread.userId)

Loading…
Cancel
Save