From b4d44294e22153f9f9e4ab3294eb51fe4040470d Mon Sep 17 00:00:00 2001
From: Thomas Sileo <t@a4.io>
Date: Mon, 4 Jun 2018 18:01:36 +0200
Subject: [PATCH] Fix CSRF for the remote follow (admin side)

---
 templates/authorize_remote_follow.html | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/templates/authorize_remote_follow.html b/templates/authorize_remote_follow.html
index 78b7ef0..e0fdc8d 100644
--- a/templates/authorize_remote_follow.html
+++ b/templates/authorize_remote_follow.html
@@ -7,8 +7,9 @@
 <h2>You're about to follow <strong>{{ profile}} </strong></h2>
 
 <form method="POST" action="">
-	<input type="hidden" name="profile" value="{{ profile }}">
-	<input type="submit" value="follow">
+<input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
+<input type="hidden" name="profile" value="{{ profile }}">
+<input type="submit" value="follow">
 </form>
 
 </div>