From 57889602584eefd17a834450950a2d2af1aba153 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Yannik=20R=C3=B6del?= Date: Sun, 24 Jul 2022 17:58:50 +0200 Subject: [PATCH] Fix missing CSRF token for hardware donation form --- sites/angestoepselt/httpd.conf | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/sites/angestoepselt/httpd.conf b/sites/angestoepselt/httpd.conf index 86e51bd..7402997 100644 --- a/sites/angestoepselt/httpd.conf +++ b/sites/angestoepselt/httpd.conf @@ -41,7 +41,9 @@ $HTTP["request-method"] =~ "GET|POST" { "^/computer-beantragen/organisation" => "/cgi-bin/form.py", "^/computer-beantragen/privat" => "/cgi-bin/form.py", "^/hardware-spenden/organisation" => "/cgi-bin/form.py", - "^/hardware-spenden/privat/laptop" => "/cgi-bin/form.py" + # Note the actual POST endpoint is /hardware-spenden/privat/laptop, but the + # form is served from /hardware-spenden/privat. + "^/hardware-spenden/privat" => "/cgi-bin/form.py" ) }