summaryrefslogtreecommitdiffstats
path: root/templates
diff options
context:
space:
mode:
authorSam Wenham <sam@wenhams.co.uk>2019-04-14 22:45:31 +0100
committerSam Wenham <sam@wenhams.co.uk>2019-04-14 22:45:31 +0100
commit23df89cf319f05cbad4cb769c05c5699fe9d3f4a (patch)
treeb2fdc953496cd2fd0b7c75fdf4e65a022b730581 /templates
parentd1d0c24ed8864e88f1f6e74c5ac5776fdeaf6f5a (diff)
downloadtroggle-23df89cf319f05cbad4cb769c05c5699fe9d3f4a.tar.gz
troggle-23df89cf319f05cbad4cb769c05c5699fe9d3f4a.tar.bz2
troggle-23df89cf319f05cbad4cb769c05c5699fe9d3f4a.zip
Fix CSRF issues in svx form
Set date formats Add DataIssue model and add errors to it to allow us to give people a list of stuff to fix
Diffstat (limited to 'templates')
-rw-r--r--templates/logbookentry.html8
-rw-r--r--templates/svxfile.html2
2 files changed, 5 insertions, 5 deletions
diff --git a/templates/logbookentry.html b/templates/logbookentry.html
index 5c8c341..5691c4e 100644
--- a/templates/logbookentry.html
+++ b/templates/logbookentry.html
@@ -20,10 +20,10 @@
<p>
{% if logbookentry.get_previous_by_date %}
- <a href="{{ logbookentry.get_previous_by_date.get_absolute_url }}">{{logbookentry.get_previous_by_date.date}}</a>
+ <a href="{{ logbookentry.get_previous_by_date.get_absolute_url }}">{{logbookentry.get_previous_by_date.date|date:"D d M Y"}}</a>
{% endif %}
{% if logbookentry.get_next_by_date %}
- <a href="{{ logbookentry.get_next_by_date.get_absolute_url }}">{{logbookentry.get_next_by_date.date}}</a>
+ <a href="{{ logbookentry.get_next_by_date.get_absolute_url }}">{{logbookentry.get_next_by_date.date|date:"D d M Y"}}</a>
{% endif %}
</p>
@@ -47,12 +47,12 @@
<td>
{% if persontrip.persontrip_prev %}
- <a href="{{ persontrip.persontrip_prev.logbook_entry.get_absolute_url }}">{{persontrip.persontrip_prev.logbook_entry.date}}</a>
+ <a href="{{ persontrip.persontrip_prev.logbook_entry.get_absolute_url }}">{{persontrip.persontrip_prev.logbook_entry.date|date:"D d M Y"}}</a>
{% endif %}
</td>
<td>
{% if persontrip.persontrip_next %}
- <a href="{{ persontrip.persontrip_next.logbook_entry.get_absolute_url }}">{{persontrip.persontrip_next.logbook_entry.date}}</a>
+ <a href="{{ persontrip.persontrip_next.logbook_entry.get_absolute_url }}">{{persontrip.persontrip_next.logbook_entry.date|date:"D d M Y"}}</a>
{% endif %}
</td>
diff --git a/templates/svxfile.html b/templates/svxfile.html
index e1ed097..b92f067 100644
--- a/templates/svxfile.html
+++ b/templates/svxfile.html
@@ -46,7 +46,7 @@ $(document).ready(function()
</p>
{% endif %}
-<form id="codewikiform" action="" method="POST">
+<form id="codewikiform" action="" method="POST">{% csrf_token %}
<div class="codeframebit">{{form.code}}</div>
<div style="display:none">{{form.filename}} {{form.dirname}} {{form.datetime}} {{form.outputtype}}</div>
<input type="submit" name="diff" value="Diffy" />