Oliver/ODOO4projects.com
Public Access
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix buyNow CSRF: use dynamic origin. Remove pricing foot from Empire card.

Browse Source
This commit is contained in:
reef
2026-08-22 12:33:16 +00:00
parent 109bcac7f7
commit b34e001c46
2 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
index.html
-1
View File
@@ -343,7 +343,6 @@
<li><i class="fas fa-check" style="color: var(--success)"></i> Priority support &amp; dedicated onboarding</li> <li><i class="fas fa-check" style="color: var(--success)"></i> Priority support &amp; dedicated onboarding</li>
</ul> </ul>
</div> </div>
<div class="pcard-foot">No setup fee. Stripe Payment<br />Cancel at any time</div>
</div> </div>
</div> </div>
<p class="pricing-cta-note">Save money, less administration</p> <p class="pricing-cta-note">Save money, less administration</p>
script.js
+1 -1
View File
@@ -640,7 +640,7 @@ var si = 0,
var location = locSelect ? locSelect.value : ''; var location = locSelect ? locSelect.value : '';
var form = document.createElement('form'); var form = document.createElement('form');
form.method = 'POST'; form.method = 'POST';
form.action = 'https://ODOO4projects.com/shop/post_basket'; form.action = window.location.origin + '/shop/post_basket';
form.target = '_blank'; form.target = '_blank';
form.style.display = 'none'; form.style.display = 'none';
var basket = document.createElement('input'); var basket = document.createElement('input');