From 5bc91fa0d7e03bf6b00667c2eee9d8a9d4454db3 Mon Sep 17 00:00:00 2001
From: Mads Jensen <mje@inducks.org>
Date: Wed, 20 Jan 2016 21:00:04 +0100
Subject: [PATCH] added missing {% csrf_token %} to some forms

---
 rest_framework/templates/rest_framework/admin.html | 2 ++
 rest_framework/templates/rest_framework/base.html  | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/rest_framework/templates/rest_framework/admin.html b/rest_framework/templates/rest_framework/admin.html
index f8f1724e6..a5de88c27 100644
--- a/rest_framework/templates/rest_framework/admin.html
+++ b/rest_framework/templates/rest_framework/admin.html
@@ -190,6 +190,7 @@
       <form action="{{ request.get_full_path }}" data-method="PUT" enctype="multipart/form-data" class="form-horizontal" novalidate>
         <div class="modal-body">
           <fieldset>
+            {% csrf_token %}
             {{ put_form }}
           </fieldset>
         </div>
@@ -214,6 +215,7 @@
       <form action="{{ request.get_full_path }}" data-method="{{ request.method }}" enctype="multipart/form-data" class="form-horizontal" novalidate>
         <div class="modal-body">
           <fieldset>
+            {% csrf_token %}
             {{ error_form }}
           </fieldset>
         </div>
diff --git a/rest_framework/templates/rest_framework/base.html b/rest_framework/templates/rest_framework/base.html
index 5eb2c9729..99080bc9d 100644
--- a/rest_framework/templates/rest_framework/base.html
+++ b/rest_framework/templates/rest_framework/base.html
@@ -193,6 +193,7 @@
                     {% with form=raw_data_post_form %}
                       <form action="{{ request.get_full_path }}" method="POST" class="form-horizontal">
                         <fieldset>
+                          {% csrf_token %}
                           {% include "rest_framework/raw_data_form.html" %}
                           <div class="form-actions">
                             <button class="btn btn-primary" title="Make a POST request on the {{ name }} resource">POST</button>
@@ -223,6 +224,7 @@
                     <div class="tab-pane" id="put-object-form">
                       <form action="{{ request.get_full_path }}" data-method="PUT" enctype="multipart/form-data" class="form-horizontal" novalidate>
                         <fieldset>
+                          {% csrf_token %}
                           {{ put_form }}
                           <div class="form-actions">
                             <button class="btn btn-primary js-tooltip" title="Make a PUT request on the {{ name }} resource">PUT</button>