fix of the json upload format

2026-08-04 20:44:15 +02:00
parent 88f124c991
commit 91ddc6e864
2 changed files with 8 additions and 3 deletions
@@ -11863,8 +11863,8 @@ def batch_upload_page():
    return render_template('upload_batch.html')


+
@app.route('/upload_csv_batch', methods=['POST'])
-@csrf.exempt
 def upload_csv_batch():
    """
    Route for batch adding new items to the inventory via CSV.
@@ -127,6 +127,7 @@
            padding-bottom: 0;
        }
    </style>
+    <meta name="csrf-token" content="{{ csrf_token() }}">
 </head>
 <body>

@@ -272,11 +273,15 @@ document.getElementById('batchUploadForm').addEventListener('submit', async func
                formData.append('images', img);
            });

-            // An Server senden
            try {
+                const csrfToken = document.querySelector('meta[name="csrf-token"]').getAttribute('content');
+
                const response = await fetch('/upload_csv_batch', {
                    method: 'POST',
-                    body: formData
+                    body: formData,
+                    headers: {
+                        'X-CSRFToken': csrfToken
+                    }
                });

                const result = await response.json();