zulip/templates/zephyr/logout.html at 5195451519f53441240b01e4befb51c6f07a94e5 - zulip - DHI Technical Services LLC - Private GIT

paulmataruso/zulip

mirror of https://github.com/zulip/zulip.git synced 2025-11-12 09:58:06 +00:00

Files

Reid Barton 6bb9ad4e3c Avoid cross-site logout attacks

Require POST method for /accounts/logout. This has the side effect of
automatically enabling Django's CSRF protection.

(imported from commit 44b1b6ebaadc1c03006e21ae54ac768e31234801)

2013-03-06 19:10:04 -05:00

5 lines

121 B

HTML

Raw Blame History

 <div class="hidden">
   <form id="logout_form" action="/accounts/logout/" method="POST">{% csrf_token %}
   </form>
 </div>