feat:1、增加登录注册跨站攻击防护

2、移除上传图片默认的域名
2025-10-26 03:21:49 +08:00 · 2018-11-14 12:02:52 +08:00
parent c666fcbed8
commit 27d42d194c
6 changed files with 41 additions and 12 deletions
--- a/views/account/find_password_setp2.tpl
+++ b/views/account/find_password_setp2.tpl
@@ -34,6 +34,7 @@
    <div class="row login">
        <div class="login-body">
            <form role="form" method="post" id="findPasswordForm" action="{{urlfor "AccountController.ValidEmail"}}">
+            {{ .xsrfdata }}
                <input type="hidden" name="token" value="{{.Token}}">
                <input type="hidden" name="mail" value="{{.Email}}">
                <h3 class="text-center">找回密码</h3>