Files
gurixandClaude b8d0d6d16a Fix CSRF token missing in submission and login forms
Add CSRF token hidden input fields to:
- Submission form (submission/form.html)
- Login form (auth/login.html)

Also fix broken link in login page that referenced submission.form
without required product_slug parameter. Changed to link to index page.

Bug found during manual testing when submitting feedback resulted in
"Bad Request - The CSRF token is missing" error.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-16 15:30:45 +02:00

45 lines
1.8 KiB
HTML

{% extends "base.html" %}
{% block title %}Submit Feedback - {{ product.name }}{% endblock %}
{% block content %}
<h1>Submit Feedback</h1>
<h2>{{ product.name }}</h2>
<p>We value your feedback. Please share your thoughts, report issues, or suggest improvements below.</p>
<form method="POST" enctype="multipart/form-data">
<input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
<div class="form-group">
<label for="feedback_text">Your Feedback</label>
<textarea id="feedback_text" name="feedback_text"
placeholder="Describe your feedback in any language..."></textarea>
<p style="font-size: 0.9em; color: #666; margin-top: 5px;">
You can write in any language. Optional if you attach files.
</p>
</div>
<div class="form-group">
<label for="files">Attachments (Optional)</label>
<input type="file" id="files" name="files" multiple>
<p style="font-size: 0.9em; color: #666; margin-top: 5px;">
You can attach up to 3 files (max 10MB each). Allowed types: images (PNG, JPG, GIF),
documents (PDF, TXT, DOC, DOCX), spreadsheets (XLS, XLSX, CSV).
</p>
</div>
<div style="background-color: #f8f9fa; padding: 15px; border-radius: 4px; margin: 20px 0;">
<h3 style="margin-top: 0; font-size: 1.1em;">Privacy Notice</h3>
<ul style="margin: 10px 0; padding-left: 20px; line-height: 1.8;">
<li>Your feedback is submitted anonymously</li>
<li>We do not collect or store your IP address</li>
<li>All files are scanned for malware</li>
<li>Please do not include personal information unless necessary</li>
</ul>
</div>
<button type="submit">Submit Feedback</button>
</form>
{% endblock %}