From d6b79df17174ef7cd14376185e1ab17d5bfcdcca Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C3=89tienne=20Beaul=C3=A9?= Date: Sun, 22 Sep 2024 22:41:12 -0300 Subject: [PATCH] Use POST for logout requests Using the GET method for logging out was deprecated in Django 4.1 and removed in 5.1. To retain styling, some modifications to the scss were needed, and a new CSRF middleware added to avoid an "Invalid" error on clicking the new buttons. Fixes #2463 --- tabbycat/settings/core.py | 1 + tabbycat/templates/nav/admin_nav.html | 12 ++-- tabbycat/templates/nav/top_nav_base.html | 9 ++- tabbycat/templates/scss/modules/forms.scss | 2 +- tabbycat/templates/scss/modules/nav.scss | 55 +++++++++++-------- .../tournaments/templates/site_index.html | 21 ++++++- 6 files changed, 65 insertions(+), 35 deletions(-) diff --git a/tabbycat/settings/core.py b/tabbycat/settings/core.py index 3c0c84db04c..ba379602a8d 100644 --- a/tabbycat/settings/core.py +++ b/tabbycat/settings/core.py @@ -96,6 +96,7 @@ MIDDLEWARE = [ 'django.middleware.gzip.GZipMiddleware', 'django.middleware.security.SecurityMiddleware', + 'django.middleware.csrf.CsrfViewMiddleware', 'whitenoise.middleware.WhiteNoiseMiddleware', 'django.contrib.sessions.middleware.SessionMiddleware', # User language preferences; must be after Session diff --git a/tabbycat/templates/nav/admin_nav.html b/tabbycat/templates/nav/admin_nav.html index a40f3d918a6..636272bc72d 100644 --- a/tabbycat/templates/nav/admin_nav.html +++ b/tabbycat/templates/nav/admin_nav.html @@ -272,11 +272,13 @@ {% endfor %}
- +
diff --git a/tabbycat/templates/nav/top_nav_base.html b/tabbycat/templates/nav/top_nav_base.html index 42f1b63576a..6c4a2ff3c81 100644 --- a/tabbycat/templates/nav/top_nav_base.html +++ b/tabbycat/templates/nav/top_nav_base.html @@ -104,9 +104,12 @@