Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-10-28 09:36:16 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: csrf token only on non-GET routes

Browse Source
This commit is contained in:
Julian Lam
2020-10-14 14:02:03 -04:00
parent 3326d80c11
commit 20bb9c7ec8
1 changed files with 10 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
public/src/modules/api.js
View File

@@ -10,11 +10,7 @@ define('api', () => {
baseUrl + options.url; baseUrl + options.url;
function doAjax(cb) { function doAjax(cb) {
$.ajax(Object.assign({ $.ajax(options)
headers: {
'x-csrf-token': config.csrf_token,
},
}, options))
.done((res) => { .done((res) => {
cb(null, cb(null,
res.hasOwnProperty('status') && res.hasOwnProperty('response') ? res.hasOwnProperty('status') && res.hasOwnProperty('response') ?
@@ -57,18 +53,27 @@ define('api', () => {
url: route, url: route,
method: 'post', method: 'post',
data: payload, data: payload,
headers: {
'x-csrf-token': config.csrf_token,
},
}, onSuccess); }, onSuccess);
api.put = (route, payload, onSuccess) => call({ api.put = (route, payload, onSuccess) => call({
url: route, url: route,
method: 'put', method: 'put',
data: payload, data: payload,
headers: {
'x-csrf-token': config.csrf_token,
},
}, onSuccess); }, onSuccess);
api.del = (route, payload, onSuccess) => call({ api.del = (route, payload, onSuccess) => call({
url: route, url: route,
method: 'delete', method: 'delete',
data: payload, data: payload,
headers: {
'x-csrf-token': config.csrf_token,
},
}, onSuccess); }, onSuccess);
return api; return api;