diff options
| author | Felipe Artur Cardozo <fcardozo@gitlab.com> | 2018-07-27 00:16:03 +0300 |
|---|---|---|
| committer | Felipe Artur Cardozo <fcardozo@gitlab.com> | 2018-07-27 00:16:03 +0300 |
| commit | bc1b4d9fef7e55f9afffcfaa4f784b984ca97f31 (patch) | |
| tree | 48c5c0cd09a1870494e4cfccd37b1924ee5af072 /app | |
| parent | e1d86b75826dc0ef858e31da09ae678155b1984b (diff) | |
| parent | 2408519e08084f6d81f2628eba6868910ee7fcfa (diff) | |
Merge branch 'security-fj-missing-csrf-system-hooks' into 'master'
[master] Missing CSRF in System Hooks
See merge request gitlab/gitlabhq!2419
Diffstat (limited to 'app')
| -rw-r--r-- | app/helpers/hooks_helper.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/app/helpers/hooks_helper.rb b/app/helpers/hooks_helper.rb index 551b9cca6b1..0a356ba55d2 100644 --- a/app/helpers/hooks_helper.rb +++ b/app/helpers/hooks_helper.rb @@ -10,7 +10,7 @@ module HooksHelper trigger_human_name = trigger.to_s.tr('_', ' ').camelize - link_to path, rel: 'nofollow' do + link_to path, rel: 'nofollow', method: :post do content_tag(:span, trigger_human_name) end end |