Merge pull request #16570 from saurabh6790/jinja_injection_fix

fix: access request parameter directly
This commit is contained in:
Nabin Hait 2019-02-05 10:31:08 +05:30 committed by GitHub
commit b6d2c7eb80
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -15,7 +15,7 @@
{{ chapter_button() }}
<p><a href="">Leave Chapter</a></p>
{% else %}
{% if frappe.local.request.method=='POST' %}
{% if request.method=='POST' %}
<p>Welcome to chapter {{ chapter.name }}!</p>
{{ chapter_button() }}
{% else %}