From b1d1a7c6c5c13c1496fa87a0eddaf4e724ecb299 Mon Sep 17 00:00:00 2001
From: Paul Duncan <pabs@pablotron.org>
Date: Sat, 21 May 2016 13:05:20 -0400
Subject: add csrf protection to login page

---
 src/views/login-page.ecr | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'src/views')

diff --git a/src/views/login-page.ecr b/src/views/login-page.ecr
index 9f2082a..e0404ce 100644
--- a/src/views/login-page.ecr
+++ b/src/views/login-page.ecr
@@ -75,6 +75,12 @@
                   Log In
                 </button>
               </div><!-- form-group -->
+
+              <input
+                type='hidden'
+                name='csrf_token'
+                value='<%= h(get_csrf_token) %>'
+              />
             </form>
           </div><!-- panel-body -->
         </div><!-- panel -->
-- 
cgit v1.2.3