Cannot delete pages #56

Closed
opened 2025-04-19 21:21:07 +00:00 by danieljsummers · 2 comments

The page deletion form is not including the anti-CSRF token. (Post deletion works; this only affects pages.)

The page deletion form is not including the anti-CSRF token. (Post deletion works; this only affects pages.)
danieljsummers added the
area
writing
label 2025-04-19 21:21:17 +00:00
danieljsummers added the
bug
moderate
label 2025-04-19 21:22:41 +00:00
danieljsummers added this to the v3 milestone 2025-07-04 15:14:13 +00:00
Author
Owner

htmx v2 stopped including form bodies in DELETE requests; we should remove anti-forgery checking from these routes.

htmx v2 stopped including `form` bodies in `DELETE` requests; we should remove anti-forgery checking from these routes.
danieljsummers self-assigned this 2025-07-05 02:19:29 +00:00
Author
Owner

This has been completed for all DELETE routes.

All routes verify that the object being deleted belongs to the current web log, and all verify a certain level of access within the current web log.

This has been completed for all `DELETE` routes. All routes verify that the object being deleted belongs to the current web log, and all verify a certain level of access within the current web log.
Sign in to join this conversation.
No description provided.