04/28 Fixed some security issues

2026-04-28 16:27:39 -04:00
parent d8b57cde77
commit bfc2f58fe2
38 changed files with 4273 additions and 4067 deletions
@@ -17,6 +17,7 @@ Code Management{% endblock %} {% block content %}
      method="POST"
      action="{{ url_for('users.create_user') }}"
    >
+      <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
      <div class="form-section">
        <h3>
          <i class="fas fa-user"></i>
@@ -463,6 +464,7 @@ Code Management{% endblock %} {% block content %}
          method: 'POST',
          headers: {
            'Content-Type': 'application/json',
+          'X-CSRF-Token': (window.qrConfig && window.qrConfig.csrfToken) || '',
          },
          body: JSON.stringify({ project_ids: projectIds })
        });