nik/FreedomBox
1
0
Fork 0
mirror of https://github.com/freedombox/FreedomBox.git synced 2026-07-22 11:59:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

upgrades: Require CSRF token for starting upgrade process

Browse Source
This commit is contained in:
Sunil Mohan Adapa 2015-02-10 14:00:46 +05:30 committed by James Valleroy
parent 9ab948012e
commit a5473ae7f2
2 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
plinth/modules/upgrades/templates/upgrades.html
View File

@ -25,8 +25,11 @@
<p>This will run unattended-upgrades, which will attempt to upgrade your system
with the latest Debian packages. It may take a minute to complete.</p>
<p><a class="btn btn-primary btn-lg" href="{% url 'upgrades:run' %}">
Upgrade now &raquo;
</a></p>
<form class="form" method="post" action="{% url 'upgrades:run' %}">
{% csrf_token %}
<input type="submit" class="btn btn-primary" value="Upgrade now &raquo;"/>
</form>
{% endblock %}

2
plinth/modules/upgrades/upgrades.py
View File

@ -24,6 +24,7 @@ from django.contrib import messages
from django.contrib.auth.decorators import login_required
from django.core.urlresolvers import reverse_lazy
from django.template.response import TemplateResponse
from django.views.decorators.http import require_POST
from gettext import gettext as _
from plinth import actions
@ -54,6 +55,7 @@ def index(request):
@login_required
@require_POST
@package.required('unattended-upgrades')
def run(request):
"""Run upgrades and show the output page"""