Merge pull request #5 from getgrav/feature/nonce

Add nonce validation

CHANGELOG.md

@@ -1,8 +1,18 @@
+# v1.0.2
+## 11/13/2015
+
+1. [](#improved)
+    * Use nonce
+1. [](#improved)
+    * Changed form action to work with multilang
+
 # v1.0.1
 ## 11/11/2015
 
 1. [](#bugfix)
     * Fix error when user/data/comments does not exist
+1. [](#improved)
+    * Use onAdminMenu instead of the deprecated onAdminTemplateNavPluginHook
 
 # v1.0.0
 ## 10/21/2015

templates/partials/comments.html.twig

@@ -21,6 +21,8 @@
             <button class="button" type="{{ button.type|default('submit') }}">{{ button.value|default('Submit') }}</button>
         {% endfor %}
         </div>
+
+        {{ nonce_field('form', 'form-nonce') }}
     </form>
 
     <div class="alert">{{ form.message }}</div>