make logout a POST operation

2025-07-09 19:40:19 +00:00 · 2025-03-12 00:45:19 +01:00
parent aaa8c4ba67
commit 5c5755d4a6
3 changed files with 30 additions and 7 deletions
--- a/core/templates/core/base/header.jinja
+++ b/core/templates/core/base/header.jinja
@ -59,7 +59,10 @@
            </div>
            <div class="links">
              <a href="{{ url('core:user_tools') }}">{% trans %}Tools{% endtrans %}</a>
-              <a href="{{ url('core:logout') }}">{% trans %}Logout{% endtrans %}</a>
+              <form id="logout-form" method="post" action="{{ url("core:logout") }}">
+                {% csrf_token %}
+                <button type="submit">{% trans %}Logout{% endtrans %}</button>
+              </form>
            </div>
          </div>
          <a