From 019ca1100b09bd98c27ec90998906e21d360ae0a Mon Sep 17 00:00:00 2001
From: Daniel Schadt <kingdread@gmx.de>
Date: Mon, 5 Dec 2022 23:26:12 +0100
Subject: fix CSRF issue for account creation

We forgot to include the CSRF token here.
---
 fietsboek/templates/create_account.jinja2 | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/fietsboek/templates/create_account.jinja2 b/fietsboek/templates/create_account.jinja2
index 17f96a9..d7b4177 100644
--- a/fietsboek/templates/create_account.jinja2
+++ b/fietsboek/templates/create_account.jinja2
@@ -1,8 +1,10 @@
 {% extends "layout.jinja2" %}
+{% import "util.jinja2" as util with context %}
 {% block content %}
 <div class="container">
   <h1>{{ _("page.create_account.title") }}</h1>
   <form method="POST" action="{{ request.route_path('create-account') }}" class="needs-validation" novalidate>
+    {{ util.hidden_csrf_input() }}
     <div class="row mb-3 justify-content-center">
       <div class="col-lg-5">
         <div class="form-floating">
-- 
cgit v1.2.3