All routes verify that the object being deleted belongs to the current web log, and all verify a certain level of access within the current web log.
This has been completed for all `DELETE` routes.
All routes verify that the object being deleted belongs to the current web log, and all verify a certain level of access within the current web log.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
The page deletion form is not including the anti-CSRF token. (Post deletion works; this only affects pages.)
htmx v2 stopped including
formbodies inDELETErequests; we should remove anti-forgery checking from these routes.This has been completed for all
DELETEroutes.All routes verify that the object being deleted belongs to the current web log, and all verify a certain level of access within the current web log.