diff options
Diffstat (limited to 'app/layout/aside_configure.phtml')
| -rw-r--r-- | app/layout/aside_configure.phtml | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/app/layout/aside_configure.phtml b/app/layout/aside_configure.phtml index d107e7f63..9824e7fa8 100644 --- a/app/layout/aside_configure.phtml +++ b/app/layout/aside_configure.phtml @@ -2,6 +2,9 @@ declare(strict_types=1); ?> <nav class="nav nav-list aside" id="aside_feed"> + <form id="post-csrf" method="post"> + <input type="hidden" name="_csrf" value="<?= FreshRSS_Auth::csrfToken() ?>" /> + </form> <a class="toggle_aside" href="#close"><?= _i('close') ?></a> <ul> @@ -19,9 +22,8 @@ <a href="<?= _url('user', 'profile') ?>"><?= _t('gen.menu.user_profile') ?></a> </li> <li class="item"> - <a class="signout" href="<?= FreshRSS_auth_Controller::getLogoutUrl() ?>"> - <?php - echo _t('gen.auth.logout'); ?> <?= _i('logout') ?></a> + <button class="as-link signout" form="post-csrf" formaction="<?= + FreshRSS_auth_Controller::getLogoutUrl() ?>"><?= _t('gen.auth.logout'); ?><?= _i('logout') ?></button> </li> </ul> </li> |