{% extends "base.html" %}
{% load djblets_deco i18n %}

{% block title %}{% trans "Recover Password" %}{% endblock %}

{% block content %}
{% box "passwordreset" %}
 <form method="post" action=".">

  {# This should really use {% csrf_token %}, but we can't until we #}
  {# move to Django 1.2 in a future release.                        #}
  {% if csrf_token %}
  {%  if csrf_token != "NOTPROVIDED" %}
  <div style="display: none;"><input type="hidden" name="csrfmiddlewaretoken" value="{{csrf_token}}" /></div>
  {%  endif %}

  {% endif %}
  <div class="box-head">
   <h1 class="box-title">{% trans "Recover Password" %}</h1>
  </div>
  <div class="box-main">
   <p>{% blocktrans %}Forgotten your password? Enter your e-mail address, and
   we'll send you instructions for creating a new one.{% endblocktrans %}</p>
   <table>
    <tr>
     <td class="label"><label for="id_email">{% trans "E-mail address" %}</label></td>
     <td class="field"><input type="text" name="email" id="id_email" /></td>
     <td class="field"><input type="submit" value="{% trans "Recover" %}" /></td>
    </tr>
   </table>
  </div>
 </form>
{% endbox %}
{% endblock %}

{% extends "base.html" %}
{% load djblets_deco i18n %}

{% block title %}{% trans "Recover Password" %}{% endblock %}

{% block content %}
{%  box "passwordreset" %}
 <form method="post" action=".">
  {% csrf_token %}

  <div class="box-head">
   <h1 class="box-title">{% trans "Recover Password" %}</h1>
  </div>
  <div class="box-main">
   <p>{% blocktrans %}Forgotten your password? Enter your e-mail address, and
   we'll send you instructions for creating a new one.{% endblocktrans %}</p>
   <table>
    <tr>
     <td class="label"><label for="id_email">{% trans "E-mail address" %}</label></td>
     <td class="field"><input type="text" name="email" id="id_email" /></td>
     <td class="field"><input type="submit" value="{% trans "Recover" %}" /></td>
    </tr>
   </table>
  </div>
 </form>
{%  endbox %}
{% endblock %}

Fix up password reset template to use modern CSRF protection.
Fix up password reset template to use modern CSRF protection.

Once upon a time, we rolled our own CSRF protection. This file was somehow
never updated for it, and still had a comment about what we should do when
moving to Django 1.2(!).

Testing done:
Went through complete password reset flow.

Reviewed at https://reviews.reviewboard.org/r/6405/
