leetNightshade
/
grav-plugin-comments
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Merge pull request #5 from getgrav/feature/nonce 

Add nonce validation
This commit is contained in:
Flavio Copes 2015-11-13 18:57:46 +01:00
parent 750727911e d93361d821
commit ff621707e2
2 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
CHANGELOG.md
View File

@ -1,8 +1,18 @@
# v1.0.2
## 11/13/2015
1. [](#improved)
* Use nonce
1. [](#improved)
* Changed form action to work with multilang
# v1.0.1 # v1.0.1
## 11/11/2015 ## 11/11/2015
1. [](#bugfix) 1. [](#bugfix)
* Fix error when user/data/comments does not exist * Fix error when user/data/comments does not exist
1. [](#improved)
* Use onAdminMenu instead of the deprecated onAdminTemplateNavPluginHook
# v1.0.0 # v1.0.0
## 10/21/2015 ## 10/21/2015

2
templates/partials/comments.html.twig
View File

@ -21,6 +21,8 @@
<button class="button" type="{{ button.type|default('submit') }}">{{ button.value|default('Submit') }}</button> <button class="button" type="{{ button.type|default('submit') }}">{{ button.value|default('Submit') }}</button>
{% endfor %} {% endfor %}
</div> </div>
{{ nonce_field('form', 'form-nonce') }}
</form> </form>
<div class="alert">{{ form.message }}</div> <div class="alert">{{ form.message }}</div>