odoo
/
odoo
2
0
Fork 0
Code Pull Requests Releases Activity

[IMP] restrict /job/success to being POSTed against 

bzr revid: xmo@openerp.com-20131125134023-1bxg4s4licdpt7ih
This commit is contained in:
Xavier Morel 2013-11-25 14:40:23 +01:00
parent c6284ffa61
commit 21e860c4d0
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
addons/website_hr_recruitment/controllers/main.py
View File

@ -52,7 +52,7 @@ class website_hr_recruitment(http.Controller):
def detail(self, job, **kwargs):
return request.website.render("website_hr_recruitment.detail", {'job': job})
@website.route(['/job/success'], type='http', auth="admin", multilang=True)
@website.route(['/job/success'], methods=['POST'], type='http', auth="admin", multilang=True)
def success(self, **post):
data = {
'name': _('Online Form'),