Commit e3dee9e5 authored by Dave Cridland's avatar Dave Cridland Committed by GitHub

Merge pull request #596 from guusdk/OF-777_CSFR

OF-777: Workaround for CSFR with file upload.
parents 2718fc7f 6c547d9a
...@@ -644,8 +644,7 @@ else if ("false".equals(request.getParameter("uploadsuccess"))) { %> ...@@ -644,8 +644,7 @@ else if ("false".equals(request.getParameter("uploadsuccess"))) { %>
<div> <div>
<h3><fmt:message key="plugin.admin.upload_plugin" /></h3> <h3><fmt:message key="plugin.admin.upload_plugin" /></h3>
<p><fmt:message key="plugin.admin.upload_plugin.info" /></p> <p><fmt:message key="plugin.admin.upload_plugin.info" /></p>
<form action="plugin-admin.jsp?uploadplugin" enctype="multipart/form-data" method="post"> <form action="plugin-admin.jsp?uploadplugin&amp;csrf=${csrf}" enctype="multipart/form-data" method="post">
<input type="hidden" name="csrf" value="${csrf}">
<input type="file" name="uploadfile" /> <input type="file" name="uploadfile" />
<input type="submit" value="<fmt:message key="plugin.admin.upload_plugin" />" /> <input type="submit" value="<fmt:message key="plugin.admin.upload_plugin" />" />
</form> </form>
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment