Add csrf protection

This commit is contained in:
Trinity Pointard
2018-06-24 18:58:57 +02:00
parent 3bc90e71d4
commit 30e9620d0a
10 changed files with 135 additions and 13 deletions
+2 -2
View File
@@ -1,6 +1,6 @@
use activitypub::collection::OrderedCollection;
use rocket::{
request::Form,
request::LenientForm,
response::{Redirect, Flash}
};
use rocket_contrib::Template;
@@ -55,7 +55,7 @@ struct NewBlogForm {
}
#[post("/blogs/new", data = "<data>")]
fn create(conn: DbConn, data: Form<NewBlogForm>, user: User) -> Redirect {
fn create(conn: DbConn, data: LenientForm<NewBlogForm>, user: User) -> Redirect {
let form = data.get();
let slug = utils::make_actor_id(form.title.to_string());