Add anti-bot nonce field to generated forms. Closes #541.

knadh · Oct 27, 2021 · ed8d68b · ed8d68b
1 parent b163b13
commit ed8d68b
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/frontend/src/views/Forms.vue b/frontend/src/views/Forms.vue
@@ -41,6 +41,7 @@
         <pre v-if="checked.length > 0">&lt;form method=&quot;post&quot; action=&quot;{{ settings['app.root_url'] }}/subscription/form&quot; class=&quot;listmonk-form&quot;&gt;
     &lt;div&gt;
         &lt;h3&gt;Subscribe&lt;/h3&gt;
+        &lt;input type=&quot;hidden&quot; name=&quot;nonce&quot; /&gt;
         &lt;p&gt;&lt;input type=&quot;email&quot; name=&quot;email&quot; required placeholder=&quot;{{ $t('subscribers.email') }}&quot; /&gt;&lt;/p&gt;
         &lt;p&gt;&lt;input type=&quot;text&quot; name=&quot;name&quot; placeholder=&quot;{{ $t('public.subName') }}&quot; /&gt;&lt;/p&gt;
       <template v-for="l in publicLists"><span v-if="l.uuid in selected" :key="l.id" :set="id = l.uuid.substr(0, 5)">