added XSRF protection to all forms and associated tests

[bluechips.git] / bluechips / templates / transfer / index.mako

diff --git a/bluechips/templates/transfer/index.mako b/bluechips/templates/transfer/index.mako
index 736c339c34a81fb6e4dc2ba272315842d2e3fb37..7c3daa925f2d2a0fd1b28354ccd58344b43e48e3 100644 (file)
--- a/bluechips/templates/transfer/index.mako
+++ b/bluechips/templates/transfer/index.mako
@@ -1,6 +1,7 @@
 <%inherit file="/base.mako"/>
 
 <form action="${h.url_for(controller='transfer', action='update', id=c.transfer.id)}" method="post">
+  ${h.auth_token_hidden_field()}
   <table class="form">
     <tr>
       <th><label for="debtor_id">From</label></th>