XSRFFormHtml() should also generate XSRF token.

5d18a746 · Mikhail Devyatov · 912abe32 · 5d18a746
Commit 5d18a746 authored Oct 27, 2015 by Mikhail Devyatov
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 2 deletions

controller.go controller.go +2 -2

No files found.
--- a/controller.go
+++ b/controller.go
@@ -647,8 +647,8 @@ func (c *Controller) CheckXSRFCookie() bool {

 // XSRFFormHTML writes an input field contains xsrf token value.
 func (c *Controller) XSRFFormHTML() string {
-	return "<input type=\"hidden\" name=\"_xsrf\" value=\"" +
-		c._xsrfToken + "\"/>"
+	return `<input type="hidden" name="_xsrf" value="` +
+		c.XSRFToken() + `" />`
 }

 // GetControllerAndAction gets the executing controller name and action name.