From 22107876b9fb38d1dfe64813c3ead86f1272aa38 Mon Sep 17 00:00:00 2001
From: David Siegfried <david.siegfried@uni-vechta.de>
Date: Fri, 15 Mar 2024 20:28:22 +0000
Subject: [PATCH] use always data-secure, re #2908
Merge request studip/studip!2681
---
app/views/messages/write.php | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/app/views/messages/write.php b/app/views/messages/write.php
index c170572c532..41176280c8b 100644
--- a/app/views/messages/write.php
+++ b/app/views/messages/write.php
@@ -1,4 +1,4 @@
-<form class="default" name="write_message" action="<?= URLHelper::getLink("dispatch.php/messages/send") ?>" method="post" style="margin-left: auto; margin-right: auto;" data-dialog data-secure="#adressees > li:eq(1), .files > li:eq(1)">
+<form class="default" name="write_message" action="<?= URLHelper::getLink("dispatch.php/messages/send") ?>" method="post" style="margin-left: auto; margin-right: auto;" data-dialog data-secure="true">
<?= CSRFProtection::tokenTag() ?>
<input type="hidden" name="message_id" id="message_id" value="<?= htmlReady($default_message->id) ?>">
--
GitLab