Last few CSRF fields

2024-08-15 20:30:47 -04:00 · 2024-08-15 20:30:47 -04:00 · de62444eca
parent e19ded1362
commit de62444eca
2 changed files with 2 additions and 0 deletions
--- a/templates/page/captcha.html.ep
+++ b/templates/page/captcha.html.ep
@ -26,5 +26,6 @@
    ) %>
  </div>
  <%= hidden_field number => $roman_numeral, id => 'number' %>
+  <%= csrf_field %>
  <button type="submit" class="form-button">Answer</button>
 </form>
--- a/templates/remark/create.html.ep
+++ b/templates/remark/create.html.ep
@ -55,6 +55,7 @@
    <%= check_box preview => 1, id => 'preview' %>
    <%= label_for preview => 'Preview' %>
  </div>
+  <%= csrf_field %>
  <button type="submit" class="form-button">Post</button>
 </form>
 <%# Putting this first above the thread body (nested if, yucky sry) %>