improve csrf handling (#2936)

2021-11-16 10:17:26 +01:00
parent a1992494d3
commit 95796ab256
15 changed files with 122 additions and 34 deletions
--- a/templates/invoice/actions.html.twig
+++ b/templates/invoice/actions.html.twig
@@ -30,6 +30,6 @@

 {% macro invoice_template(template, view) %}
    {% import "macros/widgets.html.twig" as widgets %}
-    {% set event = actions(app.user, 'invoice_template', view, {'template': template}) %}
+    {% set event = actions(app.user, 'invoice_template', view, {'template': template, 'token': csrf_token('invoice.delete_template')}) %}
    {{ widgets.table_actions(event.actions) }}
 {% endmacro %}