feat: add CSRF token handling for delete and borrow forms

2026-05-28 19:39:33 +02:00
parent 8a6a842e1a
commit d325fa57e8
1 changed files with 8 additions and 1 deletions
@@ -754,7 +754,8 @@
            const resp = await fetch(`/delete_library_item/${itemId}`, {
                method: 'POST',
                headers: {
-                    'X-CSRFToken': '{{ csrf_token }}'
+                    'X-CSRFToken': '{{ csrf_token }}',
+                    'X-CSRF-Token': '{{ csrf_token }}'
                },
                credentials: 'same-origin'
            });
@@ -878,6 +879,12 @@
        form.method = 'POST';
        form.action = `/ausleihen/${itemId}`;

+        const csrfField = document.createElement('input');
+        csrfField.type = 'hidden';
+        csrfField.name = 'csrf_token';
+        csrfField.value = '{{ csrf_token }}';
+        form.appendChild(csrfField);
+
        const cardField = document.createElement('input');
        cardField.type = 'hidden';
        cardField.name = 'borrower_card_id';