mirror of
https://github.com/jwinterm/modoboa.git
synced 2026-10-18 05:51:26 +02:00
Fixed CSRF issues in edit operations.
This commit is contained in:
@@ -214,6 +214,7 @@ def newdomain(request):
|
||||
|
||||
@login_required
|
||||
@permission_required("admin.view_domain")
|
||||
@require_http_methods(["POST"])
|
||||
@reversion.create_revision()
|
||||
def editdomain(request, dom_id):
|
||||
"""Edit domain view."""
|
||||
|
||||
@@ -167,6 +167,7 @@ def newaccount(request):
|
||||
|
||||
@login_required
|
||||
@permission_required("core.change_user")
|
||||
@require_http_methods(["POST"])
|
||||
@reversion.create_revision()
|
||||
def editaccount(request, pk):
|
||||
account = User.objects.get(pk=pk)
|
||||
|
||||
Reference in New Issue
Block a user