CSRF protect the suggestions form

Oops.
adamzap · Feb 25, 2013 · ab5c1c0 · ab5c1c0
1 parent 90bf0db
commit ab5c1c0
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/richard/suggestions/views.py b/richard/suggestions/views.py
@@ -16,12 +16,14 @@
 
 from django.contrib import messages
 from django.shortcuts import render, redirect
+from django.views.decorators.csrf import csrf_protect
 
 from richard.suggestions.forms import SuggestionForm
 from richard.suggestions.models import Suggestion
 from richard.suggestions.utils import mark_if_spam
 
 
+@csrf_protect
 def suggestions(request):
     """Show a list of all accepted suggestions and their status."""
     if request.method == 'POST':