CSRF Protection

2021-05-28 21:14:06 +02:00
parent f90e3fe99a
commit 3d45129ce1
5 changed files with 161 additions and 5 deletions
--- a/views/login.ejs
+++ b/views/login.ejs
@@ -1,4 +1,5 @@
 <form action="/login" method="post">
+	<input type="hidden" name="_csrf" value="<%= csrfToken %>">
 	<div>
 	<label>Username:</label>
 	<input type="text" name="username"/><br/>