Logoff com proteção csrf

8 months ago · c8559cc164
1 changed files with 7 additions and 4 deletions
--- a/sigi/templates/admin/base_site.html
+++ b/sigi/templates/admin/base_site.html
@ -45,10 +45,13 @@
    </a>
  {% endif %}
  {% if not user.is_anonymous %}
-    <a href="{% url 'logout' %}">
-      {% trans 'Log out' %}
-      <i class="material-icons" aria-hidden="true">exit_to_app</i>
-    </a>
+    <form id="logout-form" method="post" action="{% url 'admin:logout' %}">
+      {% csrf_token %}
+      <button type="submit">
+        {% translate 'Log out' %}
+        <i class="material-icons" aria-hidden="true">exit_to_app</i>
+      </button>
+    </form>
  {% endif %}
 {% endblock %}