From d7d6f940effac21a50f14142f1716ac97e6fa493 Mon Sep 17 00:00:00 2001
From: kisfenyo <nagyfenyvesi.viktor@gmail.com>
Date: Mon, 23 Feb 2026 15:12:09 +0100
Subject: [PATCH] fix: CSRF field name must be _csrf, not csrf_token

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 hub/internal/web/templates/app_detail.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/hub/internal/web/templates/app_detail.html b/hub/internal/web/templates/app_detail.html
index 7a1edae..9bf3c25 100644
--- a/hub/internal/web/templates/app_detail.html
+++ b/hub/internal/web/templates/app_detail.html
@@ -37,7 +37,7 @@
                 <h2 style="margin: 0;">{{if .Summary}}{{if .Summary.DisplayName}}{{.Summary.DisplayName}}{{else}}{{.AppName}}{{end}}{{else}}{{.AppName}}{{end}}</h2>
                 <form method="POST" action="/apps/{{.AppName}}/reset-telemetry{{if .Period}}?period={{.Period}}{{end}}"
                       onsubmit="return confirm('Biztosan törlöd a(z) {{.AppName}} összes telemetriai adatát? Ez nem vonható vissza.');">
-                    <input type="hidden" name="csrf_token" value="{{.CSRFToken}}">
+                    <input type="hidden" name="_csrf" value="{{.CSRFToken}}">
                     <button type="submit" class="btn btn-sm btn-danger">Telemetria törlése</button>
                 </form>
             </div>