enable csrf for live-edit post

[chloro.git] / chloro / phyll / templates / phyll / note_detail.html

diff --git a/chloro/phyll/templates/phyll/note_detail.html b/chloro/phyll/templates/phyll/note_detail.html
index d0b9bc36c34ca7ee0be720c440362d06a3cce3bc..06966f499fb48560ca9996b06976e8470e5ac8c4 100644 (file)
--- a/chloro/phyll/templates/phyll/note_detail.html
+++ b/chloro/phyll/templates/phyll/note_detail.html
@@ -8,7 +8,9 @@
 <div>
 <h2>{{ object.title }}</h2>
 <div {% if request.user.is_staff %}contenteditable="true"{% endif %}>{{ object.text|safe }}</div>
-{% if request.user.is_staff %}<button id="save">{% trans "Save" %}</button>{% endif %}
+{% if request.user.is_staff %}
+{% csrf_token %}<button id="save">{% trans "Save" %}</button>
+{% endif %}
 
 <div class="meta">{{ object.creation_timestamp|date:"j E Y, H:i"|lower }}</div>
 </div>