~jan0sch/smederee

Showing details for patch db9f947713c1a2aeae3d842c3b9be24ce6071162.
2022-07-20 (Wed), 10:45 AM - Jens Grassel - db9f947713c1a2aeae3d842c3b9be24ce6071162

Fix: possible duplicate element id for csrf token

If multiple forms are rendered then the csrf token element would have the same id.
Therefore the id is now randomised.
Summary of changes
1 files modified with 1 lines added and 1 lines removed
  • modules/hub/src/main/twirl/de/smederee/hub/views/csrfToken.scala.html with 1 added and 1 removed lines
diff -rN -u old-smederee/modules/hub/src/main/twirl/de/smederee/hub/views/csrfToken.scala.html new-smederee/modules/hub/src/main/twirl/de/smederee/hub/views/csrfToken.scala.html
--- old-smederee/modules/hub/src/main/twirl/de/smederee/hub/views/csrfToken.scala.html	2025-02-03 02:21:58.725914806 +0000
+++ new-smederee/modules/hub/src/main/twirl/de/smederee/hub/views/csrfToken.scala.html	2025-02-03 02:21:58.725914806 +0000
@@ -1,2 +1,2 @@
 @(csrf: Option[CsrfToken])
-<input type="hidden" id="@Constants.csrfCookieName" name="@Constants.csrfCookieName" value="@csrf">
+<input type="hidden" id="@Constants.csrfCookieName-@{scala.util.Random.alphanumeric.take(4).mkString}" name="@Constants.csrfCookieName" value="@csrf">