web admin: add CSRF

2025-12-09 16:25:15 +03:00 · 2021-02-03 08:55:28 +01:00
parent f863530653
commit e9dd4ecdf0
17 changed files with 459 additions and 25 deletions
--- a/templates/admins.html
+++ b/templates/admins.html
@@ -99,6 +99,7 @@
            url: path,
            type: 'DELETE',
            dataType: 'json',
+            headers: {'X-CSRF-TOKEN' : '{{.CSRFToken}}'},
            timeout: 15000,
            success: function (result) {
                table.button('delete:name').enable(true);