Work on blog

rewrite entire blog section

views/profil.py

@@ -327,8 +327,9 @@ def totp_qrcode():
         os.path.join(DOSSIER_PERSO, user, "totp.png"), "totp.png")
     
   
-@profil.route('/deltoken-password-lost/<token>', methods=['GET','POST'] )
+@profil.route('/deltoken-password-lost/<token>', methods=['GET'] )
 def deltoken_passwd_lost(token) :
+    token = escape(token)
     if valid_token_register(token, "Lost password"):
         user = get_user_by_token(token, "Lost password")
         conn = sqlite3.connect(DATABASE) # Connexion à la base de donnée