diff options
| author | John Olheiser <john.olheiser@gmail.com> | 2020-02-25 14:28:47 -0600 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-02-25 14:28:47 -0600 |
| commit | c161bb013e091c0bcc524f07d50c028d9daf8cce (patch) | |
| tree | 0638e74576902e5c18cb77b3e469a5435cf707e5 /templates/org/team/members.tmpl | |
| parent | 4427a936b4c7bd07908ccbe96104928dd29cf59d (diff) | |
| download | gitea-c161bb013e091c0bcc524f07d50c028d9daf8cce.tar.gz gitea-c161bb013e091c0bcc524f07d50c028d9daf8cce.zip | |
Change action GETs to POST (#10462)
* Change action GETs to POST
* submite = submit + smite
* No more # href
* Fix test
* Match other tests
* Explicit csrf
Signed-off-by: jolheiser <john.olheiser@gmail.com>
Co-authored-by: guillep2k <18600385+guillep2k@users.noreply.github.com>
Diffstat (limited to 'templates/org/team/members.tmpl')
| -rw-r--r-- | templates/org/team/members.tmpl | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/templates/org/team/members.tmpl b/templates/org/team/members.tmpl index 74e5e1908a..f3b08652cd 100644 --- a/templates/org/team/members.tmpl +++ b/templates/org/team/members.tmpl @@ -27,7 +27,10 @@ {{range .Team.Members}} <div class="item"> {{if $.IsOrganizationOwner}} - <a class="ui red small button right" href="{{$.OrgLink}}/teams/{{$.Team.LowerName}}/action/remove?uid={{.ID}}">{{$.i18n.Tr "org.members.remove"}}</a> + <form method="post" action="{{$.OrgLink}}/teams/{{$.Team.LowerName}}/action/remove?uid={{.ID}}"> + {{$.CsrfTokenHtml}} + <button type="submit" class="ui red small button right" >{{$.i18n.Tr "org.members.remove"}}</button> + </form> {{end}} <a href="{{.HomeLink}}"> <img class="ui avatar image" src="{{.RelAvatarLink}}"> |