templates: Add CSRF (cross-site request forgery) values to form posts

[patchwork] / templates / patchwork / patch-list.html

diff --git a/templates/patchwork/patch-list.html b/templates/patchwork/patch-list.html
index bc9abe943e62364bd1a5fbcea698e9e52c79467b..fe4d6060e4cd5a16670ace0e06df834db810cae1 100644 (file)
--- a/templates/patchwork/patch-list.html
+++ b/templates/patchwork/patch-list.html
@@ -12,6 +12,7 @@
  {% if order.editable %}
   <td class="patchlistreorder">
    <form method="post" id="reorderform">
+    {% csrf_token %}
     <input type="hidden" name="form" value="reorderform"/>
     <input type="hidden" name="order_start" value="0"/>
     <span id="reorderhelp"></span>
@@ -33,6 +34,7 @@
 {% endif %}
 
 <form method="post">
+{% csrf_token %}
 <input type="hidden" name="form" value="patchlistform"/>
 <input type="hidden" name="project" value="{{project.id}}"/>
 <table class="patchlist" id="patchlist">