more csrf protection for invoice and search (#2984)

2021-12-02 18:01:51 +01:00
parent b0045a910c
commit 4e42911f3d
7 changed files with 73 additions and 20 deletions
--- a/templates/invoice/actions.html.twig
+++ b/templates/invoice/actions.html.twig
@@ -6,7 +6,7 @@

 {% macro invoice(invoice, view) %}
    {% import "macros/widgets.html.twig" as widgets %}
-    {% set event = actions(app.user, 'invoice', view, {'invoice': invoice, 'token': csrf_token('invoice.delete')}) %}
+    {% set event = actions(app.user, 'invoice', view, {'invoice': invoice, 'token': csrf_token('invoice.status')}) %}
    {{ widgets.table_actions(event.actions) }}
 {% endmacro %}