From 51943f9a113dc175448acd423ab30c6edb14a65a Mon Sep 17 00:00:00 2001 From: Michael Snoyman Date: Mon, 25 Oct 2010 12:04:39 +0200 Subject: [PATCH] runFormPostNoNonce --- Yesod/Form.hs | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/Yesod/Form.hs b/Yesod/Form.hs index 042f4b39..bf807f29 100644 --- a/Yesod/Form.hs +++ b/Yesod/Form.hs @@ -25,6 +25,7 @@ module Yesod.Form , runFormGet , runFormMonadGet , runFormPost + , runFormPostNoNonce , runFormMonadPost , runFormGet' , runFormPost' @@ -93,6 +94,13 @@ fieldsToDivs = mapFormXml $ mapM_ go |] clazz fi = if fiRequired fi then "required" else "optional" +-- | Run a form against POST parameters, without CSRF protection. +runFormPostNoNonce :: GForm s m xml a -> GHandler s m (FormResult a, xml, Enctype) +runFormPostNoNonce f = do + rr <- getRequest + (pp, files) <- liftIO $ reqRequestBody rr + runFormGeneric pp files f + -- | Run a form against POST parameters. -- -- This function includes CSRF protection by checking a nonce value. You must