From a7d07008dbc8b45b53db7395eac89119adcdddb8 Mon Sep 17 00:00:00 2001
From: Mukhammad Karimov <10654965+heykarimoff@users.noreply.github.com>
Date: Wed, 8 Jan 2025 00:58:55 +1100
Subject: [PATCH] Replace logout method from get to post (#238)

---
 .../templates/django_ledger/includes/nav.html      | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/django_ledger/templates/django_ledger/includes/nav.html b/django_ledger/templates/django_ledger/includes/nav.html
index 0f2ab4a3..60a29456 100644
--- a/django_ledger/templates/django_ledger/includes/nav.html
+++ b/django_ledger/templates/django_ledger/includes/nav.html
@@ -28,11 +28,15 @@
                     <div class="navbar-item">CE TO: {{ tx_digest_context.IO_RESULT.ce_to_date | date }}</div>
                 {% endif %}
                 <div class="navbar-item">
-                    <a href="{% url 'django_ledger:logout' %}"
-                       id="djl-el=logout-button-nav"
-                       class="button is-small is-danger is-outlined">
-                        {% trans 'Logout' %}
-                    </a>
+                    <form action="{% url 'django_ledger:logout' %}" method="POST">
+                        {% csrf_token %}
+                        <button
+                            id="djl-el=logout-button-nav"
+                            class="button is-small is-danger is-outlined"
+                            type="submit">
+                            {% trans 'Logout' %}
+                        </button>
+                    </form>
                 </div>
                 <div class="navbar-item">{% feedback_button %}</div>
                 <div class="navbar-item">v{% current_version %}</div>