archive/nntpchan
Archived
1
0
Fork 0
Code

update csrf

Browse Source
This commit is contained in:
Jeff Becker 2016-04-12 19:39:56 -04:00
parent bc239360ea
commit 29b2db8198
No known key found for this signature in database
GPG Key ID: AB950234D6EA286B
1 changed files with 49 additions and 40 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
contrib/static/mod.js
View File

@ -165,7 +165,11 @@ function nntpchan_mod(mod_action, result_elem) {
elem.removeChild(elem.firstChild); elem.removeChild(elem.firstChild);
} }
var csrf_ajax = new XMLHttpRequest();
csrf_ajax.onreadystatechange = function() {
if (csrf_ajax.readyState == XMLHttpRequest.DONE) {
// get csrf token
var csrf = csrf_ajax.getResponseHeader("X-CSRF-Token");
// fire off ajax // fire off ajax
var ajax = new XMLHttpRequest(); var ajax = new XMLHttpRequest();
ajax.onreadystatechange = function() { ajax.onreadystatechange = function() {
@ -198,6 +202,7 @@ function nntpchan_mod(mod_action, result_elem) {
} }
} }
} }
ajax.setRequestHeader("X-CSRF-Token", csrf);
if (mod_action.name) { if (mod_action.name) {
var url = mod_action.name + "/" + target; var url = mod_action.name + "/" + target;
ajax.open(mod_action.method || "GET", url); ajax.open(mod_action.method || "GET", url);
@ -212,3 +217,7 @@ function nntpchan_mod(mod_action, result_elem) {
alert("mod action has no name"); alert("mod action has no name");
} }
} }
}
csrf_ajax.open("");
csrf_ajax.send();
}