s434730/RandomSec
3
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Adapt frontend for CSRF in import dialog

Browse Source
This commit is contained in:
Antonin Delpeuch 2019-10-15 12:04:17 +01:00
parent 91cead27f8
commit f7177e670d
2 changed files with 25 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
main/webapp/modules/core/scripts/index.js
View File

@ -37,6 +37,26 @@ var Refine = {
actionAreas: []
};
Refine.wrapCSRF = function(onCSRF) {
$.get(
"command/core/get-csrf-token",
{},
function(response) {
onCSRF(response['token']);
},
"json"
);
};
Refine.postCSRF = function(url, data, success, dataType) {
Refine.wrapCSRF(function(token) {
var fullData = data || {};
data['csrf_token'] = token;
$.post(url, fulldata, success, dataType);
});
};
var lang = (navigator.language|| navigator.userLanguage).split("-")[0];
var dictionary = "";
$.ajax({

10
main/webapp/modules/core/scripts/index/default-importing-controller/controller.js
View File

@ -187,7 +187,7 @@ Refine.DefaultImportingController.prototype._ensureFormatParserUIHasInitializati
$.post(
"command/core/importing-controller?" + $.param({
"controller": "core/default-importing-controller",
"jobID": this._jobID,
"jobID": self._jobID,
"subCommand": "initialize-parser-ui",
"format": format,
"csrf_token": token
@ -219,12 +219,12 @@ Refine.DefaultImportingController.prototype.updateFormatAndOptions = function(op
$.post(
"command/core/importing-controller?" + $.param({
"controller": "core/default-importing-controller",
"jobID": this._jobID,
"jobID": self._jobID,
"subCommand": "update-format-and-options",
"csrf_token": token
}),
{
"format" : this._format,
"format" : self._format,
"options" : JSON.stringify(options)
},
function(o) {
@ -297,12 +297,12 @@ Refine.DefaultImportingController.prototype._createProject = function() {
$.post(
"command/core/importing-controller?" + $.param({
"controller": "core/default-importing-controller",
"jobID": this._jobID,
"jobID": self._jobID,
"subCommand": "create-project",
"csrf_token": token
}),
{
"format" : this._format,
"format" : self._format,
"options" : JSON.stringify(options)
},
function(o) {