0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-01-06 22:40:14 -05:00

CSRF for debug screen

This commit is contained in:
Hannah Wolfe 2013-10-17 20:36:32 +01:00
parent 2a6e77752f
commit e29a598fa5

View file

@ -16,6 +16,7 @@
</header> </header>
<section class="content"> <section class="content">
<form id="settings-export"> <form id="settings-export">
<input type="hidden" name="_csrf" value="{{csrfToken}}" />
<fieldset> <fieldset>
<div class="form-group"> <div class="form-group">
<label>Export</label> <label>Export</label>
@ -25,11 +26,12 @@
</fieldset> </fieldset>
</form> </form>
<form id="settings-import" method="post" action="/ghost/debug/db/import/" enctype="multipart/form-data"> <form id="settings-import" method="post" action="/ghost/debug/db/import/" enctype="multipart/form-data">
<input type="hidden" name="_csrf" value="{{csrfToken}}" />
<fieldset> <fieldset>
<div class="form-group"> <div class="form-group">
<label>Import</label> <label>Import</label>
<input type="file" class="button-add" name="importfile"></input> <input type="file" class="button-add" name="importfile" />
<input type="submit" class="button-save" value="Import"></input> <input type="submit" class="button-save" value="Import" />
<p>Import from another Ghost installation. If you import a user, this will replace the current user & log you out.</p> <p>Import from another Ghost installation. If you import a user, this will replace the current user & log you out.</p>
</div> </div>
</fieldset> </fieldset>