Public Access
Fix buyNow CSRF: use dynamic origin. Remove pricing foot from Empire card.
This commit is contained in:
@@ -343,7 +343,6 @@
|
||||
<li><i class="fas fa-check" style="color: var(--success)"></i> Priority support & dedicated onboarding</li>
|
||||
</ul>
|
||||
</div>
|
||||
<div class="pcard-foot">No setup fee. Stripe Payment<br />Cancel at any time</div>
|
||||
</div>
|
||||
</div>
|
||||
<p class="pricing-cta-note">Save money, less administration</p>
|
||||
|
||||
@@ -640,7 +640,7 @@ var si = 0,
|
||||
var location = locSelect ? locSelect.value : '';
|
||||
var form = document.createElement('form');
|
||||
form.method = 'POST';
|
||||
form.action = 'https://ODOO4projects.com/shop/post_basket';
|
||||
form.action = window.location.origin + '/shop/post_basket';
|
||||
form.target = '_blank';
|
||||
form.style.display = 'none';
|
||||
var basket = document.createElement('input');
|
||||
|
||||
Reference in New Issue
Block a user