Merge pull request #16570 from saurabh6790/jinja_injection_fix

fix: access request parameter directly
This commit is contained in:
Nabin Hait
2019-02-05 10:31:08 +05:30
committed by GitHub

View File

@@ -15,7 +15,7 @@
{{ chapter_button() }}
<p><a href="">Leave Chapter</a></p>
{% else %}
{% if frappe.local.request.method=='POST' %}
{% if request.method=='POST' %}
<p>Welcome to chapter {{ chapter.name }}!</p>
{{ chapter_button() }}
{% else %}