#21: Fix

resources/templates/auth.html

@@ -2,6 +2,7 @@
 {% block content %}
         <div id="content" class="auth">
           <form action="{{servlet-context}}/auth" method="POST">
+            {% csrf-field %}
             <input type="hidden" name="redirect-to" value="{{redirect-to}}"/>
             {% if user %}
             <p class="widget">

resources/templates/edit-css.html

@@ -3,6 +3,7 @@
 {% block content %}
         <div id="content" class="edit">
             <form action="{{servlet-context}}/edit-css" method="POST">
+                {% csrf-field %}
                 <input type="hidden" name="page" value="{{page}}"/>
                 <textarea name="src" id="src" rows="25" cols="80">{{content}}</textarea>
                 <p class="widget">

resources/templates/edit-user.html

@@ -3,6 +3,7 @@
 {% block content %}
         <div id="content" class="edit">
             <form action="{{servlet-context}}/edit-user" method="POST">
+                {% csrf-field %}
                 <p class="widget">
                     <label for="target">{{config.username-prompt}}</label>
                     <input type="text" name="target" id="target" value="{{target}}" required {% ifunequal target "" %}disabled{% endifunequal %}/>

resources/templates/edit.html

@@ -7,6 +7,7 @@
 {% block content %}
         <div id="content" class="edit">
             <form action="{{servlet-context}}/edit" method="POST">
+                {% csrf-field %}
                 <input type="hidden" name="page" value="{{page}}"/>
                 <textarea name="src" id="src" rows="25" cols="80">{{content}}</textarea>
                 <p class="widget">

resources/templates/passwd.html

@@ -2,6 +2,7 @@
 {% block content %}
         <div id="content" class="auth">
             <form action="{{servlet-context}}/passwd" method="POST">
+                {% csrf-field %}
                 <p class="widget">
                     <label for="oldpass">{{config.old-pass-prompt}}</label>
                     <input name="oldpass" id="oldpass" type="password" required/>

resources/templates/upload.html

@@ -19,6 +19,7 @@
           {% endif %}
         {% else %}
             <form action="{{servlet-context}}/upload" enctype="multipart/form-data" method="POST">
+                {% csrf-field %}
                 <p class="widget">
                     <label for="upload">{{config.file-upload-prompt}}</label>
                     <input name="upload" id="upload" type="file" required/>