use token in invoice delete route (#2889)

2021-10-30 15:17:06 +02:00
parent 40061e43bb
commit 1d32e4ecee
5 changed files with 19 additions and 8 deletions
--- a/templates/invoice/actions.html.twig
+++ b/templates/invoice/actions.html.twig
@@ -6,7 +6,7 @@

 {% macro invoice(invoice, view) %}
    {% import "macros/widgets.html.twig" as widgets %}
-    {% set event = actions(app.user, 'invoice', view, {'invoice': invoice}) %}
+    {% set event = actions(app.user, 'invoice', view, {'invoice': invoice, 'token': csrf_token('invoice.delete')}) %}
    {{ widgets.table_actions(event.actions) }}
 {% endmacro %}