Invario/Inventarsystem
3
1
Fork 0
Code Issues 5 Pull Requests Actions Packages Projects Releases 341 Wiki Activity

Fix for the CRSF Token implementation callability
Release Inventarsystem / release-docker (push) Successful in 2m16s
Details

Browse Source
This commit is contained in:
AIIrondev
2026-08-24 12:35:16 +02:00
parent 432d6da798
commit 2a6c40eb5a
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Web/templates/user_del.html
+6 -2
View File
@@ -85,6 +85,7 @@
<td>{{ permission_presets.get(user.permission_preset, {}).get('label', user.permission_preset) }}</td> <td>{{ permission_presets.get(user.permission_preset, {}).get('label', user.permission_preset) }}</td>
<td class="actions"> <td class="actions">
<form method="POST" action="{{ url_for('delete_user') }}" class="d-inline"> <form method="POST" action="{{ url_for('delete_user') }}" class="d-inline">
<input type="hidden" name="csrf_token" value="{{ csrf_token }}">
<input type="hidden" name="username" value="{{ user.username }}"> <input type="hidden" name="username" value="{{ user.username }}">
<button type="submit" class="btn btn-danger btn-sm" onclick="return confirm('Sind Sie sicher, dass Sie den Benutzer {{ user.username }} löschen möchten?')"> <button type="submit" class="btn btn-danger btn-sm" onclick="return confirm('Sind Sie sicher, dass Sie den Benutzer {{ user.username }} löschen möchten?')">
Löschen Löschen
@@ -127,6 +128,7 @@
<button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button> <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
</div> </div>
<form method="POST" action="{{ url_for('admin_update_user_permissions') }}"> <form method="POST" action="{{ url_for('admin_update_user_permissions') }}">
<input type="hidden" name="csrf_token" value="{{ csrf_token }}">
<div class="modal-body permissions-modal-body"> <div class="modal-body permissions-modal-body">
<input type="hidden" id="perm-username" name="username"> <input type="hidden" id="perm-username" name="username">
<div class="mb-3"> <div class="mb-3">
@@ -183,6 +185,7 @@
<button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button> <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
</div> </div>
<form method="POST" action="{{ url_for('admin_update_user_name') }}"> <form method="POST" action="{{ url_for('admin_update_user_name') }}">
<input type="hidden" name="csrf_token" value="{{ csrf_token }}">
<div class="modal-body"> <div class="modal-body">
<input type="hidden" id="edit-username" name="username"> <input type="hidden" id="edit-username" name="username">
<div class="mb-3"> <div class="mb-3">
@@ -216,6 +219,7 @@
<button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button> <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
</div> </div>
<form method="POST" action="{{ url_for('admin_reset_user_password') }}"> <form method="POST" action="{{ url_for('admin_reset_user_password') }}">
<input type="hidden" name="csrf_token" value="{{ csrf_token }}">
<div class="modal-body"> <div class="modal-body">
<input type="hidden" id="reset-username" name="username"> <input type="hidden" id="reset-username" name="username">
<div class="mb-3"> <div class="mb-3">
@@ -343,11 +347,11 @@
form.method = 'POST'; form.method = 'POST';
form.action = "{{ url_for('export_users_csv') }}"; form.action = "{{ url_for('export_users_csv') }}";
// 1. CSRF-Token hinzufügen // 1. CSRF-Token als Wert (ohne Klammern) übergeben
var csrfInput = document.createElement('input'); var csrfInput = document.createElement('input');
csrfInput.type = 'hidden'; csrfInput.type = 'hidden';
csrfInput.name = 'csrf_token'; csrfInput.name = 'csrf_token';
csrfInput.value = "{{ csrf_token() }}"; csrfInput.value = "{{ csrf_token }}";
form.appendChild(csrfInput); form.appendChild(csrfInput);
// 2. Gefilterte Benutzernamen hinzufügen // 2. Gefilterte Benutzernamen hinzufügen