opensource/freeCodeCamp
3
0
Fork 0
mirror of https://github.com/freeCodeCamp/freeCodeCamp.git synced 2026-10-16 07:29:52 +08:00
Code Issues Packages Projects Releases Wiki Activity

Changed Views to accept CSRF token

Browse Source
This commit is contained in:
Brian Ridings
2014-02-03 13:08:34 -05:00
parent f9ec861151
commit c99c8fe1f8
5 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app.js
+1 -1
View File
@@ -79,7 +79,7 @@ app.use(passport.initialize());
app.use(passport.session());
app.use(function(req, res, next) {
res.locals.user = req.user;
res.locals.token = req.csrfToken();
res.locals.token = req.csrfToken();
next();
});
app.use(flash());
views/account/login.jade
+1 -1
View File
@@ -25,7 +25,7 @@ block content
label.control-label(for='username') Password
input.form-control(type='password', name='password', id='password', placeholder='Password')
.form-group
input.form-control(type='hidden', name='_csrf', value=token)
input.form-control(type='hidden', name='_csrf', value=token)
.form-group
button.btn.btn-primary(type='submit')
i.fa.fa-unlock-alt
views/account/profile.jade
+3 -3
View File
@@ -31,7 +31,7 @@ block content
.col-xs-4
input.form-control(type='text', name='website', id='website', value='#{user.profile.website}')
.form-group
input.form-control(type='hidden', name='_csrf', value=token)
input.form-control(type='hidden', name='_csrf', value=token)
.form-group
.col-xs-offset-2.col-xs-4
button.btn.btn.btn-primary(type='submit') Update Profile
@@ -52,7 +52,7 @@ block content
.col-xs-4
input.form-control(type='password', name='confirmPassword', id='confirmPassword')
.form-group
input.form-control(type='hidden', name='_csrf', value=token)
input.form-control(type='hidden', name='_csrf', value=token)
.form-group
.col-xs-offset-3.col-xs-4
button.btn.btn.btn-primary(type='submit') Change Password
@@ -85,4 +85,4 @@ block content
if user.github
p: a.text-danger(href='/account/unlink/github') Unlink your GitHub account
else
p: a(href='/auth/github') Link your GitHub account
p: a(href='/auth/github') Link your GitHub account
views/account/signup.jade
+1 -1
View File
@@ -16,7 +16,7 @@ block content
.col-sm-7
input.form-control(type='password', name='confirmPassword', id='confirmPassword', placeholder='Confirm Password')
.form-group
input.form-control(type='hidden', name='_csrf', value=token)
input.form-control(type='hidden', name='_csrf', value=token)
.form-group
.col-sm-offset-3.col-sm-7
button.btn.btn-success(type='submit')
views/contact.jade
+1 -1
View File
@@ -18,7 +18,7 @@ block content
.col-sm-8
textarea.form-control(type='text', name='message', id='message', rows='7')
.form-group
input.form-control(type='hidden', name='_csrf', value=token)
input.form-control(type='hidden', name='_csrf', value=token)
.form-group
.col-sm-offset-2.col-sm-8
button.btn.btn-default(type='submit')