Add some security headers

This commit is contained in:
Cadence Ember
2020-05-30 23:07:32 +12:00
parent ea81b945ce
commit d3c6598e50
5 changed files with 24 additions and 8 deletions

View File

@@ -33,11 +33,7 @@ html
body.settings-page
if status && message
.status-notice(class=status)= message
script.
const params = new URLSearchParams(window.location.search)
params.delete("status")
params.delete("message")
history.replaceState(null, "", "?" + params.toString())
script(src=getStaticURL("html", "/static/js/settings_message.js") type="module")
main.settings
form(action=returnAction method="post" enctype="application/x-www-form-urlencoded")
input(type="hidden" name="csrf" value=csrf)