zulip/templates/zerver/logout.html

mirror of https://github.com/zulip/zulip.git
<div class="hidden">
  <form id="logout_form" action="/accounts/logout/" method="POST">{% csrf_token %}
  </form>
</div>
Avoid cross-site logout attacks Require POST method for /accounts/logout. This has the side effect of automatically enabling Django's CSRF protection. (imported from commit 44b1b6ebaadc1c03006e21ae54ac768e31234801) 2013-03-05 23:45:02 +01:00			`<div class="hidden">`
			`<form id="logout_form" action="/accounts/logout/" method="POST">{% csrf_token %}`
			`</form>`
			`</div>`