From 21e860c4d00def254be01932ce2a073ba60412c1 Mon Sep 17 00:00:00 2001 From: Xavier Morel Date: Mon, 25 Nov 2013 14:40:23 +0100 Subject: [PATCH] [IMP] restrict /job/success to being POSTed against bzr revid: xmo@openerp.com-20131125134023-1bxg4s4licdpt7ih --- addons/website_hr_recruitment/controllers/main.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/addons/website_hr_recruitment/controllers/main.py b/addons/website_hr_recruitment/controllers/main.py index 2f42073dbbb..126c6562eb8 100644 --- a/addons/website_hr_recruitment/controllers/main.py +++ b/addons/website_hr_recruitment/controllers/main.py @@ -52,7 +52,7 @@ class website_hr_recruitment(http.Controller): def detail(self, job, **kwargs): return request.website.render("website_hr_recruitment.detail", {'job': job}) - @website.route(['/job/success'], type='http', auth="admin", multilang=True) + @website.route(['/job/success'], methods=['POST'], type='http', auth="admin", multilang=True) def success(self, **post): data = { 'name': _('Online Form'),