I see we exclude certain forms from protection to allow caching/whatever. I think the User Login Block form should probably be on that list :)

Patch forthcoming.

Comments

jpstrikesback’s picture

Status: Active » Needs review
StatusFileSize
new352 bytes
geerlingguy’s picture

Status: Needs review » Fixed
jpstrikesback’s picture

Cheers!

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

Anonymous’s picture

Issue summary: View changes

Typo