From 32f2695b76306c6bd9a93cd3842b330c54989b57 Mon Sep 17 00:00:00 2001
From: simon <simon@journeyman.cc>
Date: Sun, 23 Jul 2017 20:20:06 +0100
Subject: [PATCH] Added cross-scripting field to auth form.

---
 resources/templates/auth.html | 45 ++++++++++++++++++-----------------
 1 file changed, 23 insertions(+), 22 deletions(-)

diff --git a/resources/templates/auth.html b/resources/templates/auth.html
index ce56af0..87ffbe2 100644
--- a/resources/templates/auth.html
+++ b/resources/templates/auth.html
@@ -1,27 +1,28 @@
 {% extends "templates/base.html" %}
 {% block content %}
         <div id="content" class="auth">
-            <form action="{{servlet-context}}/auth" method="POST">
-                <input type="hidden" name="redirect-to" value="{{redirect-to}}"/>
-                {% if user %}
-                <p class="widget">
-                    <label for="submit">{{config.save-prompt}}</label>
-                    <input name="action" id="action" type="submit" class="action-dangerous" value="{{config.logout-label}}"/>
-                </p>
-                {% else %}
-                <p class="widget">
-                    <label for="username">{{config.your-uname-prompt}}</label>
-                    <input name="username" id="username" type="text" required/>
-                </p>
-                <p class="widget">
-                    <label for="password">{{config.old-pass-prompt}}</label>
-                    <input name="password" id="password" type="password" required/>
-                </p>
-                <p class="widget">
-                    <label for="submit">{{config.login-prompt}}</label>
-                    <input name="action" id="action" type="submit" class="action" value="{{config.login-label}}"/>
-                </p>
-                {% endif %}
-            </form>
+          <form action="{{servlet-context}}/auth" method="POST">
+            {% csrf-field %}
+            <input type="hidden" name="redirect-to" value="{{redirect-to}}"/>
+            {% if user %}
+            <p class="widget">
+              <label for="submit">{{config.save-prompt}}</label>
+              <input name="action" id="action" type="submit" class="action-dangerous" value="{{config.logout-label}}"/>
+            </p>
+            {% else %}
+            <p class="widget">
+              <label for="username">{{config.your-uname-prompt}}</label>
+              <input name="username" id="username" type="text" required/>
+            </p>
+            <p class="widget">
+              <label for="password">{{config.old-pass-prompt}}</label>
+              <input name="password" id="password" type="password" required/>
+            </p>
+            <p class="widget">
+              <label for="submit">{{config.login-prompt}}</label>
+              <input name="action" id="action" type="submit" class="action" value="{{config.login-label}}"/>
+            </p>
+            {% endif %}
+          </form>
         </div>
 {% endblock %}