mirror of
https://github.com/NodeBB/NodeBB.git
synced 2025-11-13 17:35:46 +01:00
added csrf to ajax calls
This commit is contained in:
@@ -26,7 +26,8 @@
|
||||
}
|
||||
|
||||
followBtn.on('click', function() {
|
||||
$.post('/users/follow', {uid: theirid},
|
||||
|
||||
$.post('/users/follow', {uid: theirid, _csrf:$('#csrf_token').val()},
|
||||
function(data) {
|
||||
followBtn.remove();
|
||||
$('#user-action-alert').html('You are now following'+ $('.account-username').text() +'!').show();
|
||||
|
||||
Reference in New Issue
Block a user