fix: Add CSRF token to update-config form

Signed-off-by: Claude (Chronicler #61) <claude@firefrostgaming.com>
2026-04-05 10:25:07 +00:00
parent 8a56c920db
commit 3e4055c5dc
1 changed files with 1 additions and 0 deletions
--- a/services/arbiter-3.0/src/views/admin/scheduler.ejs
+++ b/services/arbiter-3.0/src/views/admin/scheduler.ejs
@@ -37,6 +37,7 @@
                    </div>
                </div>
                <form action="/admin/scheduler/update-config" method="POST" class="flex gap-4 items-end">
+                    <input type="hidden" name="_csrf" value="<%= csrfToken %>">
                    <input type="hidden" name="node" value="<%= config.node %>">
                    <div class="flex-1">
                        <label class="block text-sm text-gray-500 dark:text-gray-400 mb-1">Base Time (UTC)</label>