Merged r15813 (#23587).

git-svn-id: http://svn.redmine.org/redmine/branches/3.3-stable@15878 e93f8b46-1217-0410-a6f0-8f06a7374b81

diff --git a/app/views/sudo_mode/new.html.erb b/app/views/sudo_mode/new.html.erb
index dee97162f84cb1255945beec40878f7f74e2fe0d..323a4556c8f81ef93ae5ddb911951489895d8d68 100644 (file)
--- a/app/views/sudo_mode/new.html.erb
+++ b/app/views/sudo_mode/new.html.erb
@@ -1,5 +1,5 @@
 <h2><%= l :label_password_required %></h2>
-<%= form_tag({}, class: 'tabular', id: 'sudo-form') do %>
+<%= form_tag({}, method: :post, class: 'tabular', id: 'sudo-form') do %>
 
   <%= hidden_field_tag '_method', request.request_method %>
   <%= hash_to_hidden_fields @sudo_form.original_fields %>

diff --git a/lib/redmine/sudo_mode.rb b/lib/redmine/sudo_mode.rb
index 3f2749cd59737d9ef2f2b7d0ca28b10eeab3656f..a016c98212d87fb28f32599dbe003d4882acaa9a 100644 (file)
--- a/lib/redmine/sudo_mode.rb
+++ b/lib/redmine/sudo_mode.rb
@@ -90,7 +90,7 @@ module Redmine
         return true if SudoMode.active?
 
         if param_names.blank?
-          param_names = params.keys - %w(id action controller sudo_password)
+          param_names = params.keys - %w(id action controller sudo_password _method authenticity_token utf8)
         end
 
         process_sudo_form