Added new modules to help prevent Cross Site Request Forgery

[sdnc/oam.git] / admportal / views / mobility / vnfProfile.ejs

diff --git a/admportal/views/mobility/vnfProfile.ejs b/admportal/views/mobility/vnfProfile.ejs
index 1a49498..a801b90 100644 (file)
--- a/admportal/views/mobility/vnfProfile.ejs
+++ b/admportal/views/mobility/vnfProfile.ejs
@@ -90,6 +90,7 @@
        <% if(priv == 'A'){ %>
        <div class="actions" style="padding:0px 25px;">
        <form method="POST" action="/mobility/uploadVnfProfile" enctype="multipart/form-data">
+               <input type="hidden" name="_csrf" value="<%= privilege.csrfToken %>" />
                <div class="form-group">
                <label for="dest">File input</label>
                <input name="filename" type="file" id="dest">