filters: quote param names and values when constructing querystrings

[patchwork] / templates / patchwork / patchlist.html

diff --git a/templates/patchwork/patchlist.html b/templates/patchwork/patchlist.html
index 1bcd2c1c129e58374b108f4e5782d318643abafb..d6709cd11c7e3b2f99a6eca1bf96c304ea9cca5a 100644 (file)
--- a/templates/patchwork/patchlist.html
+++ b/templates/patchwork/patchlist.html
@@ -3,6 +3,7 @@
 
 {% if patches %}
 <form method="post">
+{% csrf_token %}
 <table class="patchlist">
  <tr>
   {% if patchform %}