Add CSRF protection for cookie-authenticated requests

2026-03-23 16:20:26 +01:00
parent a3348e8795
commit fae7f80913
8 changed files with 139 additions and 17 deletions
--- a/internal/file/routes.go
+++ b/internal/file/routes.go
@@ -24,8 +24,8 @@ func RegisterRoutes(r *gin.RouterGroup, h *Handler) {

 	adminRoutes.GET("/download/:id", h.AdminGet)

-	adminRoutes.GET("/delete/:id", h.AdminDelete)
-	adminRoutes.GET("/delete/fr/:id", h.AdminForceDelete)
+	adminRoutes.POST("/delete/:id", h.AdminDelete)
+	adminRoutes.POST("/delete/fr/:id", h.AdminForceDelete)

 	adminRoutes.POST("/import", h.Import)
 	adminRoutes.GET("/export", h.Export)