vmario/wisemapping-frontend
1
0
Fork 0
mirror of https://bitbucket.org/wisemapping/wisemapping-frontend.git synced 2024-09-21 11:40:07 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add CSRF to load

Browse Source
This commit is contained in:
Paulo Gustavo Veiga 2022-02-21 05:45:10 -08:00
parent c95b5c5a50
commit 9650d27490
3 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
packages/mindplot/src/components/LocalStorageManager.ts
View File

@ -43,7 +43,7 @@ class LocalStorageManager extends PersistenceManager {
if (xml == null || this.forceLoad) { if (xml == null || this.forceLoad) {
$.ajax({ $.ajax({
url: this.documentUrl.replace('{id}', mapId), url: this.documentUrl.replace('{id}', mapId),
headers: { 'Content-Type': 'text/plain', Accept: 'application/xml' }, headers: { 'Content-Type': 'text/plain', Accept: 'application/xml', 'X-CSRF-Token': this.getCSRFToken() },
type: 'get', type: 'get',
dataType: 'text', dataType: 'text',
async: false, async: false,

4
packages/mindplot/src/components/PersistenceManager.ts
View File

@ -52,6 +52,10 @@ abstract class PersistenceManager {
} }
} }
protected getCSRFToken(): string {
return document.head.querySelector('meta[name="_csrf"]').getAttribute('content');
}
load(mapId: string) { load(mapId: string) {
$assert(mapId, 'mapId can not be null'); $assert(mapId, 'mapId can not be null');
const domDocument = this.loadMapDom(mapId); const domDocument = this.loadMapDom(mapId);

4
packages/mindplot/src/components/RestPersistenceManager.ts
View File

@ -159,10 +159,6 @@ class RESTPersistenceManager extends PersistenceManager {
return { severity, message }; return { severity, message };
} }
private getCSRFToken(): string {
return document.head.querySelector('meta[name="_csrf"]').getAttribute('content');
}
loadMapDom(mapId: string): Document { loadMapDom(mapId: string): Document {
let xml: Document; let xml: Document;
$.ajax({ $.ajax({