Merge pull request #1603 from sharelatex/spd-admin-panel-buttons-not-working

Don't use multipart/form-data for admin panel buttons

GitOrigin-RevId: 97c265a1c0addbddf5628d5e0c70fedb38bda75d
This commit is contained in:
Timothée Alby 2019-03-07 10:29:26 -05:00 committed by James Allen
parent e1fb28ae28
commit 89f31d71e3

View file

@ -13,14 +13,14 @@ block content
each message in systemMessages each message in systemMessages
.alert.alert-info.row-spaced #{message.content} .alert.alert-info.row-spaced #{message.content}
hr hr
form(enctype='multipart/form-data', method='post', action='/admin/messages') form(method='post', action='/admin/messages')
input(name="_csrf", type="hidden", value=csrfToken) input(name="_csrf", type="hidden", value=csrfToken)
.form-group .form-group
label(for="content") label(for="content")
input.form-control(name="content", type="text", placeholder="Message...", required) input.form-control(name="content", type="text", placeholder="Message...", required)
button.btn.btn-primary(type="submit") Post Message button.btn.btn-primary(type="submit") Post Message
hr hr
form(enctype='multipart/form-data', method='post', action='/admin/messages/clear') form(method='post', action='/admin/messages/clear')
input(name="_csrf", type="hidden", value=csrfToken) input(name="_csrf", type="hidden", value=csrfToken)
button.btn.btn-danger(type="submit") Clear all messages button.btn.btn-danger(type="submit") Clear all messages
@ -36,13 +36,13 @@ block content
tab(heading="Close Editor") tab(heading="Close Editor")
.row-spaced .row-spaced
form(enctype='multipart/form-data', method='post',action='/admin/closeEditor') form(method='post',action='/admin/closeEditor')
input(name="_csrf", type="hidden", value=csrfToken) input(name="_csrf", type="hidden", value=csrfToken)
button.btn.btn-danger(type="submit") Close Editor button.btn.btn-danger(type="submit") Close Editor
p.small Will stop anyone opening the editor. Will NOT disconnect already connected users. p.small Will stop anyone opening the editor. Will NOT disconnect already connected users.
.row-spaced .row-spaced
form(enctype='multipart/form-data', method='post',action='/admin/dissconectAllUsers') form(method='post',action='/admin/dissconectAllUsers')
input(name="_csrf", type="hidden", value=csrfToken) input(name="_csrf", type="hidden", value=csrfToken)
button.btn.btn-danger(type="submit") Disconnect all users button.btn.btn-danger(type="submit") Disconnect all users
p.small Will force disconnect all users with the editor open. Make sure to close the editor first to avoid them reconnecting. p.small Will force disconnect all users with the editor open. Make sure to close the editor first to avoid them reconnecting.
@ -50,7 +50,7 @@ block content
tab(heading="Subscriptions") tab(heading="Subscriptions")
h3 Link Recurly subscription to user h3 Link Recurly subscription to user
.row .row
form.form.col-xs-6(enctype='multipart/form-data', method='post',action='/admin/syncUserToSubscription') form.form.col-xs-6(method='post',action='/admin/syncUserToSubscription')
input(name="_csrf", type="hidden", value=csrfToken) input(name="_csrf", type="hidden", value=csrfToken)
.form-group .form-group
label(for='subscription_id') subscription_id (in Recurly) label(for='subscription_id') subscription_id (in Recurly)
@ -64,7 +64,7 @@ block content
tab(heading="TPDS/Dropbox Management") tab(heading="TPDS/Dropbox Management")
h3 Flush project to TPDS h3 Flush project to TPDS
.row .row
form.col-xs-6(enctype='multipart/form-data', method='post',action='/admin/flushProjectToTpds') form.col-xs-6(method='post',action='/admin/flushProjectToTpds')
input(name="_csrf", type="hidden", value=csrfToken) input(name="_csrf", type="hidden", value=csrfToken)
.form-group .form-group
label(for='project_id') project_id label(for='project_id') project_id
@ -74,7 +74,7 @@ block content
hr hr
h3 Poll Dropbox for user h3 Poll Dropbox for user
.row .row
form.col-xs-6(enctype='multipart/form-data', method='post',action='/admin/pollDropboxForUser') form.col-xs-6(method='post',action='/admin/pollDropboxForUser')
input(name="_csrf", type="hidden", value=csrfToken) input(name="_csrf", type="hidden", value=csrfToken)
.form-group .form-group
label(for='user_id') user_id label(for='user_id') user_id