04/28 Fixed some security issues
This commit is contained in:
@@ -821,6 +821,7 @@
|
||||
<div class="export-actions">
|
||||
<!--
|
||||
<form method="POST" action="{{ url_for('payroll.export_payroll_excel') }}" style="display: inline;">
|
||||
<input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
|
||||
<input type="hidden" name="date_from" value="{{ date_from }}">
|
||||
<input type="hidden" name="date_to" value="{{ date_to }}">
|
||||
<input type="hidden" name="project_filter" value="{{ project_filter }}">
|
||||
@@ -832,6 +833,7 @@
|
||||
</form>
|
||||
|
||||
<form method="POST" action="{{ url_for('payroll.export_payroll_excel') }}" style="display: inline;">
|
||||
<input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
|
||||
<input type="hidden" name="date_from" value="{{ date_from }}">
|
||||
<input type="hidden" name="date_to" value="{{ date_to }}">
|
||||
<input type="hidden" name="project_filter" value="{{ project_filter }}">
|
||||
@@ -843,6 +845,7 @@
|
||||
</form>
|
||||
-->
|
||||
<form method="POST" action="{{ url_for('payroll.export_payroll_excel') }}" style="display: inline;">
|
||||
<input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
|
||||
<input type="hidden" name="date_from" value="{{ date_from }}">
|
||||
<input type="hidden" name="date_to" value="{{ date_to }}">
|
||||
<input type="hidden" name="project_filter" value="{{ project_filter }}">
|
||||
@@ -854,6 +857,7 @@
|
||||
</form>
|
||||
<!--
|
||||
<form method="POST" action="{{ url_for('payroll.export_payroll_excel') }}" style="display: inline;">
|
||||
<input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
|
||||
<input type="hidden" name="date_from" value="{{ date_from }}">
|
||||
<input type="hidden" name="date_to" value="{{ date_to }}">
|
||||
<input type="hidden" name="project_filter" value="{{ project_filter }}">
|
||||
@@ -865,6 +869,7 @@
|
||||
</form>
|
||||
|
||||
<form method="POST" action="{{ url_for('payroll.export_payroll_excel') }}" style="display: inline;">
|
||||
<input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
|
||||
<input type="hidden" name="date_from" value="{{ date_from }}">
|
||||
<input type="hidden" name="date_to" value="{{ date_to }}">
|
||||
<input type="hidden" name="project_filter" value="{{ project_filter }}">
|
||||
|
||||
Reference in New Issue
Block a user