Ensure colorbars can't escape their containers. #352

[zzz-spline-users.git] / splinext / users / templates / widgets / user_state.mako

diff --git a/splinext/users/templates/widgets/user_state.mako b/splinext/users/templates/widgets/user_state.mako
index adf816b..58be697 100644 (file)
--- a/splinext/users/templates/widgets/user_state.mako
+++ b/splinext/users/templates/widgets/user_state.mako
@@ -1,6 +1,6 @@
 <%namespace name="userlib" file="/users/lib.mako" />
 % if c.user:
-${h.form(url(controller='accounts', action='logout'), id='user')}
+${h.secure_form(url(controller='accounts', action='logout'), id='user')}
     Logged in as <a href="${url(controller='users', action='profile', id=c.user.id, name=c.user.name)}">${userlib.color_bar(c.user)} ${c.user.name}</a>.
     <input type="submit" value="Log out">
 ${h.end_form()}