ashpie/ily.li
ashpie/ily.li
1
0
Fork 0
Code Issues 3 Pull Requests 1 Releases 2 Wiki Activity

Fix missing csrf field in file manager delete form

Browse Source
This commit is contained in:
Alice Gaudon 2020-07-11 12:17:03 +02:00
parent 230f7963a0
commit 311214ad7f
2 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/controllers/FileController.ts
View File

@ -97,7 +97,7 @@ export default class FileController extends Controller {
switch (file.storage_type) { switch (file.storage_type) {
case 'local': case 'local':
await this.deleteFile(file); await FileController.deleteFile(file);
break; break;
default: default:
throw new ServerError(`This file cannot be deleted. Deletion protocol for ${file.storage_type} storage type not implemented.`); throw new ServerError(`This file cannot be deleted. Deletion protocol for ${file.storage_type} storage type not implemented.`);

1
views/file-manager.njk
View File

@ -43,6 +43,7 @@
Pending deletion Pending deletion
{% else %} {% else %}
<form action="{{ route('delete-file-frontend', file.slug) }}" method="post"> <form action="{{ route('delete-file-frontend', file.slug) }}" method="post">
{{ macros.csrf(getCSRFToken) }}
<button class="button danger"><i data-feather="trash"></i> Delete</button> <button class="button danger"><i data-feather="trash"></i> Delete</button>
</form> </form>
{% endif %} {% endif %}