From 92bca02baa9a88220791d8f9207d2e514c08abfd Mon Sep 17 00:00:00 2001 From: Antoine Nguyen Date: Thu, 13 Jun 2013 13:16:45 +0200 Subject: [PATCH] CSRF compatibility. see #240 --- modoboa/extensions/webmail/views.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/modoboa/extensions/webmail/views.py b/modoboa/extensions/webmail/views.py index 2288667cb..8563bcc6b 100644 --- a/modoboa/extensions/webmail/views.py +++ b/modoboa/extensions/webmail/views.py @@ -6,6 +6,7 @@ from django.template import Template, Context from django.utils.translation import ugettext as _, ungettext from django.core.urlresolvers import reverse from django.contrib.auth.decorators import login_required +from django.views.decorators.csrf import csrf_exempt from modoboa.lib import parameters from modoboa.lib.webutils import _render, _render_to_string, \ ajax_response, ajax_simple_response @@ -214,6 +215,7 @@ def delfolder(request): return ajax_response(request) @login_required +@csrf_exempt @needs_mailbox() def attachments(request, tplname="webmail/attachments.html"): if request.method == "POST":