From 5350d04ba58e71cff4a1b018bc674b6fddc4661c Mon Sep 17 00:00:00 2001
From: kqjy <jun@jzwsite.com>
Date: Fri, 21 Nov 2025 23:04:56 +0800
Subject: [PATCH] Add missing CSRF token in connections.html

---
 app/version.py             | 2 +-
 templates/connections.html | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/app/version.py b/app/version.py
index 122431b..bda6952 100644
--- a/app/version.py
+++ b/app/version.py
@@ -1,7 +1,7 @@
 """Central location for the application version string."""
 from __future__ import annotations
 
-APP_VERSION = "0.1.0b2"
+APP_VERSION = "0.1.1"
 
 
 def get_version() -> str:
diff --git a/templates/connections.html b/templates/connections.html
index fbe5175..93e7e1e 100644
--- a/templates/connections.html
+++ b/templates/connections.html
@@ -18,6 +18,7 @@
             </div>
             <div class="card-body">
                 <form method="POST" action="{{ url_for('ui.create_connection') }}">
+                    <input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
                     <div class="mb-3">
                         <label for="name" class="form-label">Name</label>
                         <input type="text" class="form-control" id="name" name="name" required placeholder="e.g. Production Backup">
@@ -71,6 +72,7 @@
                                 <td><code>{{ conn.access_key }}</code></td>
                                 <td>
                                     <form method="POST" action="{{ url_for('ui.delete_connection', connection_id=conn.id) }}" onsubmit="return confirm('Are you sure?');" style="display: inline;">
+                                        <input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
                                         <button type="submit" class="btn btn-sm btn-danger">Delete</button>
                                     </form>
                                 </td>