From 43e8a1ef8d7586422b5d164204a57bdd5938a6d1 Mon Sep 17 00:00:00 2001
From: Aaron Parecki <aaron@parecki.com>
Date: Sun, 12 Feb 2017 20:18:34 -0800
Subject: fix autosubmit vulnerability for "favorite" bookmarklet

closes #69
---
 views/partials/favorite-bookmarklet.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'views/partials/favorite-bookmarklet.php')

diff --git a/views/partials/favorite-bookmarklet.php b/views/partials/favorite-bookmarklet.php
index bdee851..df68802 100644
--- a/views/partials/favorite-bookmarklet.php
+++ b/views/partials/favorite-bookmarklet.php
@@ -1,3 +1,3 @@
 (function(){
-  window.open("<?= Config::$base_url ?>favorite?url="+encodeURIComponent(window.location.href)+"&autosubmit=true&token=<?= $this->token ?>");
+  window.open("<?= Config::$base_url ?>favorite?url="+encodeURIComponent(window.location.href)+"&token=<?= $this->token ?>");
 })();
-- 
cgit v1.2.3