From 2d6681d78ca4809ed139231b1e267dabe8e347f9 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 19 May 2023 11:42:43 -0300
Subject: [PATCH] refactor: logout via GET is deprecated, use POST

---
 ietf/templates/base/menu_user.html | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/ietf/templates/base/menu_user.html b/ietf/templates/base/menu_user.html
index bb68855b6..9e6bbde56 100644
--- a/ietf/templates/base/menu_user.html
+++ b/ietf/templates/base/menu_user.html
@@ -32,11 +32,13 @@
     {% else %}
         {% if user.is_authenticated %}
             <li>
-                <a class="dropdown-item {% if flavor != 'top' %} text-wrap link-primary{% endif %}"
-                   rel="nofollow"
-                   href="{% url 'django.contrib.auth.views.logout' %}">
-                    Sign out
-                </a>
+                <form id="logout-form" method="post" action="{% url 'django.contrib.auth.views.logout' %}">
+                    {% csrf_token %}
+                    <button class="dropdown-item {% if flavor != 'top' %} text-wrap link-primary{% endif %}" 
+                            type="submit">
+                        Sign out
+                    </button>
+                </form>
             </li>
             <li>
                 <a class="dropdown-item {% if flavor != 'top' %} text-wrap link-primary{% endif %}"