Shouldn't forums.views.reply be decorated @require_POST? I don't think we ever throw GETs at it, and similar views like lock_thread() are @require_POST. Note that it isn't hurting anything at present; it falls back to returning a list of posts, with a form error, on GET.
Fixed and added a test at https://github.com/jsocol/kitsune/commit/5f4b53d6
Status: NEW → RESOLVED
Last Resolved: 7 years ago
Resolution: --- → FIXED
Please add STR- I'm unsure how to verify this. After reading the related bug I tried this link: https://support-release.allizom.org/fr/questions/775683/reply But it did not redirect.
It shouldn't redirect, it should return HTTP 405
You need to log in before you can comment on or make changes to this bug.