zulip/templates/zerver/logout.html

<div class="hidden">
  <form id="logout_form" action="/accounts/logout/" method="POST">{{ csrf_input }}
  </form>
</div>
Avoid cross-site logout attacks Require POST method for /accounts/logout. This has the side effect of automatically enabling Django's CSRF protection. (imported from commit 44b1b6ebaadc1c03006e21ae54ac768e31234801) 2013-03-05 23:45:02 +01:00			`<div class="hidden">`
Convert Zulip to use Jinja2 templates. This results in a substantial performance improvement for all of Zulip's backend templates. Changes in templates: - Change `block.super` to `super()`. - Remove `load` tag because Jinja2 doesn't support it. - Use `minified_js()\|safe` instead of `{% minified_js %}`. - Use `compressed_css()\|safe` instead of `{% compressed_css %}`. - `forloop.first` -> `loop.first`. - Use `{{ csrf_input }}` instead of `{% csrf_token %}`. - Use `{# ... #}` instead of `{% comment %}`. - Use `url()` instead of `{% url %}`. - Use `_()` instead of `{% trans %}` because in Jinja `trans` is a block tag. - Use `{% trans %}` instead of `{% blocktrans %}`. - Use `{% raw %}` instead of `{% verbatim %}`. Changes in tools: - Check for `trans` block in `check-templates` instead of `blocktrans` Changes in backend: - Create custom `render_to_response` function which takes `request` objects instead of `RequestContext` object. There are two reasons to do this: 1. `RequestContext` is not compatible with Jinja2 2. `RequestContext` in `render_to_response` is deprecated. - Add Jinja2 related support files in zproject/jinja2 directory. It includes a custom backend and a template renderer, compressors for js and css and Jinja2 environment handler. - Enable `slugify` and `pluralize` filters in Jinja2 environment. Fixes #620. 2016-04-21 08:48:33 +02:00			`<form id="logout_form" action="/accounts/logout/" method="POST">{{ csrf_input }}`
Avoid cross-site logout attacks Require POST method for /accounts/logout. This has the side effect of automatically enabling Django's CSRF protection. (imported from commit 44b1b6ebaadc1c03006e21ae54ac768e31234801) 2013-03-05 23:45:02 +01:00			`</form>`
			`</div>`