Export: refresh CRSF token after submit
This allow users to submit the form multiple times, because there is no actual browser redirection to the page. Fixes #1532
This commit is contained in:
parent
bea062149e
commit
cd10bc23e7
1 changed files with 16 additions and 3 deletions
|
@ -25,16 +25,18 @@ function findParent(element, tagName, attributes) {
|
|||
/**
|
||||
* Ajax request to refresh the CSRF token.
|
||||
*/
|
||||
function refreshToken(basePath) {
|
||||
console.log('refresh');
|
||||
function refreshToken(basePath, callback) {
|
||||
const xhr = new XMLHttpRequest();
|
||||
xhr.open('GET', `${basePath}/admin/token`);
|
||||
xhr.onload = () => {
|
||||
const elements = document.querySelectorAll('input[name="token"]');
|
||||
[...elements].forEach((element) => {
|
||||
console.log(element);
|
||||
element.setAttribute('value', xhr.responseText);
|
||||
});
|
||||
|
||||
if (callback) {
|
||||
callback(xhr.response);
|
||||
}
|
||||
};
|
||||
xhr.send();
|
||||
}
|
||||
|
@ -622,4 +624,15 @@ function init(description) {
|
|||
[...autocompleteFields].forEach((autocompleteField) => {
|
||||
awesomepletes.push(createAwesompleteInstance(autocompleteField));
|
||||
});
|
||||
|
||||
const exportForm = document.querySelector('#exportform');
|
||||
if (exportForm != null) {
|
||||
exportForm.addEventListener('submit', (event) => {
|
||||
event.preventDefault();
|
||||
|
||||
refreshToken(basePath, () => {
|
||||
event.target.submit();
|
||||
});
|
||||
});
|
||||
}
|
||||
})();
|
||||
|
|
Loading…
Reference in a new issue