magv/schedule — comment on commit d0b1489d219a8ff60563de04f166f447510a08d1
File: static/tmpl/project.html line 35
By magv:

Binding actions to url should not be done for security reasons.
With this change any unrelated site will be able to post a link to #/delete-course/<...>, and you'll delete a course if you'll click it while logged in.
Only bind actions to something you can't be redirected to.
One option is to use forms with submit buttons.
Another is to bind onclick handler to relevant anchors.