add csrf check

2023-12-04 07:19:53 +00:00
parent 8f89c19e12
commit 91edab2f9b
9 changed files with 82 additions and 26 deletions
--- a/web/templates/user/login.html.tmpl
+++ b/web/templates/user/login.html.tmpl
@@ -4,6 +4,7 @@
    <h1>登录</h1>
    <div class="col-sm-4 py-md-5">
      <form action="/login" method="post">
+        {{ .CSRFField }}
        <div class="form-group">
          <div class="input-group">
            <div class="input-group-prepend">
--- a/web/templates/user/register.html.tmpl
+++ b/web/templates/user/register.html.tmpl
@@ -4,6 +4,7 @@
    <h1>注册</h1>
    <div class="col-sm-4 py-md-5">
      <form action="/register" method="post">
+        {{ .CSRFField }}
        <div class="form-group">
          <div class="input-group">
            <div class="input-group-prepend">