Ensure DELETE method for delete alias view

modoboa · Jan 20, 2023 · d4b7bdd · d4b7bdd
1 parent 66e1803
commit d4b7bdd
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/modoboa/admin/views/alias.py b/modoboa/admin/views/alias.py
@@ -9,6 +9,7 @@
 from django.urls import reverse
 from django.utils.translation import ugettext as _, ungettext
 from django.views import generic
+from django.views.decorators.http import require_http_methods
 
 from modoboa.core import signals as core_signals
 from modoboa.lib.exceptions import Conflict, PermDeniedException
@@ -93,6 +94,7 @@ def editalias(request, alid, tplname="admin/aliasform.html"):
 
 @login_required
 @permission_required("admin.delete_alias")
+@require_http_methods(["DELETE"])
 def delalias(request):
     selection = request.GET["selection"].split(",")
     for alid in selection: