Knah-Tsaeb/MyShaarli
Knah-Tsaeb/MyShaarli
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Export: refresh CRSF token after submit

Browse source 
This allow users to submit the form multiple times, because there is no actual browser redirection to the page.

Fixes #1532
This commit is contained in:
ArthurHoaro 2020-09-01 11:01:21 +02:00
parent bea062149e
commit cd10bc23e7
1 changed files with 16 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

19
assets/default/js/base.js
View file

@ -25,16 +25,18 @@ function findParent(element, tagName, attributes) {
/**
* Ajax request to refresh the CSRF token.
*/
function refreshToken(basePath) {
console.log('refresh');
function refreshToken(basePath, callback) {
const xhr = new XMLHttpRequest();
xhr.open('GET', `${basePath}/admin/token`);
xhr.onload = () => {
const elements = document.querySelectorAll('input[name="token"]');
[...elements].forEach((element) => {
console.log(element);
element.setAttribute('value', xhr.responseText);
});
if (callback) {
callback(xhr.response);
}
};
xhr.send();
}
@ -622,4 +624,15 @@ function init(description) {
[...autocompleteFields].forEach((autocompleteField) => {
awesomepletes.push(createAwesompleteInstance(autocompleteField));
});
const exportForm = document.querySelector('#exportform');
if (exportForm != null) {
exportForm.addEventListener('submit', (event) => {
event.preventDefault();
refreshToken(basePath, () => {
event.target.submit();
});
});
}
})();