refactor: add csrf protection to webinstall POST route

2026-05-07 22:06:07 +02:00 · 2024-12-10 10:17:38 -05:00
parent 04eb9e1ad7
commit 8f465afc97
2 changed files with 17 additions and 3 deletions
--- a/src/views/install/index.tpl
+++ b/src/views/install/index.tpl
@@ -35,6 +35,8 @@
 			You are just a few steps away from launching your own NodeBB forum!
 		</p>
 		<form id="install" action="/" method="post" autocomplete="off">
+			<input type="hidden" name="csrf_token" value="{csrf_token}" />
+
 			{{{ if !skipGeneralSetup }}}
 			<div class="general">
 				<p>