From: Jean-Philippe Lang <jp_lang@yahoo.fr>
Date: Sun, 2 Oct 2016 10:23:06 +0000 (+0000)
Subject: Merged r15813 (#23587).
X-Git-Tag: 3.3.1~4
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=9fa491f9f0a7abb0331bd422e619186e4f86d302;p=redmine.git

Merged r15813 (#23587).

git-svn-id: http://svn.redmine.org/redmine/branches/3.3-stable@15878 e93f8b46-1217-0410-a6f0-8f06a7374b81
---

diff --git a/app/views/sudo_mode/new.html.erb b/app/views/sudo_mode/new.html.erb
index dee97162f..323a4556c 100644
--- a/app/views/sudo_mode/new.html.erb
+++ b/app/views/sudo_mode/new.html.erb
@@ -1,5 +1,5 @@
 <h2><%= l :label_password_required %></h2>
-<%= form_tag({}, class: 'tabular', id: 'sudo-form') do %>
+<%= form_tag({}, method: :post, class: 'tabular', id: 'sudo-form') do %>
 
   <%= hidden_field_tag '_method', request.request_method %>
   <%= hash_to_hidden_fields @sudo_form.original_fields %>
diff --git a/lib/redmine/sudo_mode.rb b/lib/redmine/sudo_mode.rb
index 3f2749cd5..a016c9821 100644
--- a/lib/redmine/sudo_mode.rb
+++ b/lib/redmine/sudo_mode.rb
@@ -90,7 +90,7 @@ module Redmine
         return true if SudoMode.active?
 
         if param_names.blank?
-          param_names = params.keys - %w(id action controller sudo_password)
+          param_names = params.keys - %w(id action controller sudo_password _method authenticity_token utf8)
         end
 
         process_sudo_form