diff options
| author | Samantaz Fox <coding@samantaz.fr> | 2024-10-29 22:14:20 +0100 |
|---|---|---|
| committer | Samantaz Fox <coding@samantaz.fr> | 2024-10-29 22:14:27 +0100 |
| commit | b0c7dd977151d30e85f0095f35de892624e87a35 (patch) | |
| tree | df65130d767de3736fe9dc7843aa9428b5c05b36 | |
| parent | dbdf2ad23a3956617a124b193a4e7f2f2a4896e6 (diff) | |
| download | invidious-b0c7dd977151d30e85f0095f35de892624e87a35.tar.gz invidious-b0c7dd977151d30e85f0095f35de892624e87a35.tar.bz2 invidious-b0c7dd977151d30e85f0095f35de892624e87a35.zip | |
HTML: Replace hidden 'action' input with query parameter
The server side can only handle parameters passed as URL query
parameters and not inside the request body
Diffstat (limited to '')
| -rw-r--r-- | src/invidious/views/watch.ecr | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/src/invidious/views/watch.ecr b/src/invidious/views/watch.ecr index ce111d69..6f9ced6f 100644 --- a/src/invidious/views/watch.ecr +++ b/src/invidious/views/watch.ecr @@ -158,7 +158,7 @@ we're going to need to do it here in order to allow for translations. <% if user %> <% playlists = Invidious::Database::Playlists.select_user_created_playlists(user.email) %> <% if !playlists.empty? %> - <form data-onsubmit="return_false" class="pure-form pure-form-stacked" action="/playlist_ajax" method="post" target="_blank"> + <form data-onsubmit="return_false" class="pure-form pure-form-stacked" action="/playlist_ajax?action=add_video" method="post" target="_blank"> <div class="pure-control-group"> <label for="playlist_id"><%= translate(locale, "Add to playlist: ") %></label> <select style="width:100%" name="playlist_id" id="playlist_id"> @@ -169,7 +169,6 @@ we're going to need to do it here in order to allow for translations. </div> <input type="hidden" name="csrf_token" value="<%= URI.encode_www_form(env.get?("csrf_token").try &.as(String) || "") %>"> - <input type="hidden" name="action" value="add_video"> <input type="hidden" name="video_id" value="<%= video.id %>"> <button data-onclick="add_playlist_video" data-id="<%= video.id %>" type="submit" class="pure-button pure-button-primary"> <b><%= translate(locale, "Add to playlist") %></b> |