From: <psy...@us...> - 2011-01-24 22:03:38
|
Update of /cvsroot/frenchmozilla/bugzilla/template/fr/default/search In directory sfp-cvsdas-3.v30.ch3.sourceforge.com:/tmp/cvs-serv28273/template/fr/default/search Modified Files: Tag: BZ_3_6_BRANCH search-create-series.html.tmpl Log Message: Bug 621108: [SECURITY] Creating/editing charts lacks CSRF protection Index: search-create-series.html.tmpl =================================================================== RCS file: /cvsroot/frenchmozilla/bugzilla/template/fr/default/search/search-create-series.html.tmpl,v retrieving revision 1.4 retrieving revision 1.4.8.1 diff -u -d -r1.4 -r1.4.8.1 --- search-create-series.html.tmpl 11 Nov 2007 23:26:29 -0000 1.4 +++ search-create-series.html.tmpl 24 Jan 2011 22:03:30 -0000 1.4.8.1 @@ -52,6 +52,7 @@ [% PROCESS reports/series.html.tmpl button_name = "Créer un jeu de données" %] <input type="hidden" name="action" value="create"> + <input type="hidden" name="token" value="[% issue_hash_token(['create-series']) FILTER html %]"> <script type="text/javascript"> document.chartform.category[0].selected = true; |