Invario/Inventarsystem
3
1
Fork 0
Code Issues 9 Pull Requests Actions Packages Projects Releases 392 Wiki Activity

feat: add CSRF token handling for delete and borrow forms

Browse Source
This commit is contained in:
Aiirondev
2026-05-28 19:39:33 +02:00
parent 8a6a842e1a
commit d325fa57e8
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Web/templates/library_table.html
+8 -1
View File
@@ -754,7 +754,8 @@
const resp = await fetch(`/delete_library_item/${itemId}`, { const resp = await fetch(`/delete_library_item/${itemId}`, {
method: 'POST', method: 'POST',
headers: { headers: {
'X-CSRFToken': '{{ csrf_token }}' 'X-CSRFToken': '{{ csrf_token }}',
'X-CSRF-Token': '{{ csrf_token }}'
}, },
credentials: 'same-origin' credentials: 'same-origin'
}); });
@@ -878,6 +879,12 @@
form.method = 'POST'; form.method = 'POST';
form.action = `/ausleihen/${itemId}`; form.action = `/ausleihen/${itemId}`;
const csrfField = document.createElement('input');
csrfField.type = 'hidden';
csrfField.name = 'csrf_token';
csrfField.value = '{{ csrf_token }}';
form.appendChild(csrfField);
const cardField = document.createElement('input'); const cardField = document.createElement('input');
cardField.type = 'hidden'; cardField.type = 'hidden';
cardField.name = 'borrower_card_id'; cardField.name = 'borrower_card_id';