From a9579ec5b1c2d2967258a00f02f88203dea08037 Mon Sep 17 00:00:00 2001
From: root <root@prc.prc.parkinson.lu>
Date: Mon, 13 Mar 2017 18:06:52 +0100
Subject: [PATCH] security issue fixed
---
smash/web/views.py | 1 +
1 file changed, 1 insertion(+)
diff --git a/smash/web/views.py b/smash/web/views.py
index d7e114ea..63b6bad8 100644
--- a/smash/web/views.py
+++ b/smash/web/views.py
@@ -632,6 +632,7 @@ def appointment_edit_datetime(request, id):
form = AppointmentEditForm(instance=the_appointment)
return wrap_response(request, 'appointments/edit.html', {'form': form})
+@login_required
def export_to_csv2(request, type="subjects"):
#Create the HttpResponse object with the appropriate CSV header.
response = HttpResponse(content_type='text/csv')
--
GitLab