1.1 --- a/imipweb/calendar.py Sat Apr 23 00:41:58 2016 +0200
1.2 +++ b/imipweb/calendar.py Fri May 06 23:06:35 2016 +0200
1.3 @@ -45,6 +45,11 @@
1.4
1.5 _ = self.get_translator()
1.6
1.7 + # Check the validation token.
1.8 +
1.9 + if not self.check_validation_token():
1.10 + return False
1.11 +
1.12 # Handle a submitted form.
1.13
1.14 args = self.env.get_args()
1.15 @@ -597,7 +602,7 @@
1.16 # Form controls are used in various places on the calendar page.
1.17
1.18 page.form(method="POST")
1.19 -
1.20 + self.validator()
1.21 self.show_user_navigation()
1.22 self.show_requests_on_page()
1.23 self.show_participants_on_page(participants)