summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSamantaz Fox <coding@samantaz.fr>2024-10-29 22:14:20 +0100
committerSamantaz Fox <coding@samantaz.fr>2024-10-29 22:14:27 +0100
commitb0c7dd977151d30e85f0095f35de892624e87a35 (patch)
treedf65130d767de3736fe9dc7843aa9428b5c05b36
parentdbdf2ad23a3956617a124b193a4e7f2f2a4896e6 (diff)
downloadinvidious-b0c7dd977151d30e85f0095f35de892624e87a35.tar.gz
invidious-b0c7dd977151d30e85f0095f35de892624e87a35.tar.bz2
invidious-b0c7dd977151d30e85f0095f35de892624e87a35.zip
HTML: Replace hidden 'action' input with query parameter
The server side can only handle parameters passed as URL query parameters and not inside the request body
-rw-r--r--src/invidious/views/watch.ecr3
1 files changed, 1 insertions, 2 deletions
diff --git a/src/invidious/views/watch.ecr b/src/invidious/views/watch.ecr
index ce111d69..6f9ced6f 100644
--- a/src/invidious/views/watch.ecr
+++ b/src/invidious/views/watch.ecr
@@ -158,7 +158,7 @@ we're going to need to do it here in order to allow for translations.
<% if user %>
<% playlists = Invidious::Database::Playlists.select_user_created_playlists(user.email) %>
<% if !playlists.empty? %>
- <form data-onsubmit="return_false" class="pure-form pure-form-stacked" action="/playlist_ajax" method="post" target="_blank">
+ <form data-onsubmit="return_false" class="pure-form pure-form-stacked" action="/playlist_ajax?action=add_video" method="post" target="_blank">
<div class="pure-control-group">
<label for="playlist_id"><%= translate(locale, "Add to playlist: ") %></label>
<select style="width:100%" name="playlist_id" id="playlist_id">
@@ -169,7 +169,6 @@ we're going to need to do it here in order to allow for translations.
</div>
<input type="hidden" name="csrf_token" value="<%= URI.encode_www_form(env.get?("csrf_token").try &.as(String) || "") %>">
- <input type="hidden" name="action" value="add_video">
<input type="hidden" name="video_id" value="<%= video.id %>">
<button data-onclick="add_playlist_video" data-id="<%= video.id %>" type="submit" class="pure-button pure-button-primary">
<b><%= translate(locale, "Add to playlist") %></b>