From d462580606c2f1a602989a22b15b488c1bda7799 Mon Sep 17 00:00:00 2001
From: onli <onli@paskuda.biz>
Date: Mon, 16 Dec 2019 14:49:00 +0100
Subject: [PATCH] Fix trackback deletion from frontend, invalid referrer error

Was missing the token.

For context see https://board.s9y.org/viewtopic.php?f=10&t=24633

Cherry-picked from master branch.
---
 docs/NEWS                     | 4 ++++
 templates/2k11/trackbacks.tpl | 2 +-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/docs/NEWS b/docs/NEWS
index 084a9d31..7aad9646 100644
--- a/docs/NEWS
+++ b/docs/NEWS
@@ -15,6 +15,10 @@ Version 2.3.3-beta1 ()
    * Updates mailer event plugin to support force sending mails on
      published blog entries and ability to prepend a mail body. 
      Also fixes missing "keep strip tags" configuration option
+
+   * Fix: Add valid HTTP referrer when trying to delete a
+     trackback from the frontend
+
    * Use the video tag for videos in the Medialibrary, also when
      inserting such a video into an entry
 
diff --git a/templates/2k11/trackbacks.tpl b/templates/2k11/trackbacks.tpl
index 6f8d93b7..ca61d9e8 100644
--- a/templates/2k11/trackbacks.tpl
+++ b/templates/2k11/trackbacks.tpl
@@ -11,7 +11,7 @@
 {/if}
 {if $entry.is_entry_owner}
     <footer>
-        <a href="{$serendipityBaseURL}comment.php?serendipity[delete]={$trackback.id}&amp;serendipity[entry]={$trackback.entry_id}&amp;serendipity[type]=trackbacks">{$CONST.DELETE}</a>
+        <a href="{$trackback.link_delete}">{$CONST.DELETE}</a>
     </footer>
 {/if}
 </article>