From 9d71073a5c7c80db173b9cba88d0ca2770e19ddd Mon Sep 17 00:00:00 2001 From: Ingolf Becker Date: Mon, 17 Nov 2014 15:19:11 +0000 Subject: [PATCH] Added more POST declarations --- services/web/app/views/user/passwordReset.jade | 1 + services/web/app/views/user/setPassword.jade | 3 ++- services/web/app/views/user/settings.jade | 4 ++-- 3 files changed, 5 insertions(+), 3 deletions(-) diff --git a/services/web/app/views/user/passwordReset.jade b/services/web/app/views/user/passwordReset.jade index 4db644d916..6516e2cc94 100644 --- a/services/web/app/views/user/passwordReset.jade +++ b/services/web/app/views/user/passwordReset.jade @@ -13,6 +13,7 @@ block content async-form="password-reset-request", name="passwordResetForm" action="/user/password/reset", + method="POST", ng-cloak ) input(type="hidden", name="_csrf", value=csrfToken) diff --git a/services/web/app/views/user/setPassword.jade b/services/web/app/views/user/setPassword.jade index 815f0030ca..c46659b54f 100644 --- a/services/web/app/views/user/setPassword.jade +++ b/services/web/app/views/user/setPassword.jade @@ -12,6 +12,7 @@ block content async-form="password-reset", name="passwordResetForm", action="/user/password/set", + method="POST", ng-cloak ) input(type="hidden", name="_csrf", value=csrfToken) @@ -41,4 +42,4 @@ block content button.btn.btn-primary( type='submit', ng-disabled="passwordResetForm.$invalid" - ) #{translate("set_new_password")} \ No newline at end of file + ) #{translate("set_new_password")} diff --git a/services/web/app/views/user/settings.jade b/services/web/app/views/user/settings.jade index 3cf36a5012..da63e8b19d 100644 --- a/services/web/app/views/user/settings.jade +++ b/services/web/app/views/user/settings.jade @@ -17,7 +17,7 @@ block content .row .col-md-5 h3 #{translate("update_account_info")} - form(async-form="settings", name="settingsForm", action="/user/settings", novalidate) + form(async-form="settings", name="settingsForm", method="POST", action="/user/settings", novalidate) input(type="hidden", name="_csrf", value=csrfToken) .form-group label(for='email') #{translate("email")} @@ -54,7 +54,7 @@ block content .col-md-5.col-md-offset-1 h3 #{translate("change_password")} - form(async-form="changepassword", name="changePasswordForm", action="/user/password/update", novalidate) + form(async-form="changepassword", name="changePasswordForm", action="/user/password/update", method="POST", novalidate) input(type="hidden", name="_csrf", value=csrfToken) .form-group label(for='currentPassword') #{translate("current_password")}