From a2ba945abf4ed84f0511ac308652960a9a01be6a Mon Sep 17 00:00:00 2001 From: Scott Baker Date: Tue, 28 Oct 2014 15:57:40 -0700 Subject: [PATCH] CSRF token support in xoslib --- .../core/xoslib/static/js/xoslib/xos-backbone.js | 12 ++++++++++++ planetstack/templates/admin/base.html | 1 + 2 files changed, 13 insertions(+) diff --git a/planetstack/core/xoslib/static/js/xoslib/xos-backbone.js b/planetstack/core/xoslib/static/js/xoslib/xos-backbone.js index d2d8f17..af79852 100644 --- a/planetstack/core/xoslib/static/js/xoslib/xos-backbone.js +++ b/planetstack/core/xoslib/static/js/xoslib/xos-backbone.js @@ -226,4 +226,16 @@ if (! window.XOSLIB_LOADED ) { }; xos = new xoslib(); + + (function() { + var _sync = Backbone.sync; + Backbone.sync = function(method, model, options){ + options.beforeSend = function(xhr){ + var token = $('meta[name="csrf-token"]').attr('content'); + xhr.setRequestHeader('X-CSRFToken', token); + console.log(token); + }; + return _sync(method, model, options); + }; + })(); } diff --git a/planetstack/templates/admin/base.html b/planetstack/templates/admin/base.html index dc92ca9..21f7974 100644 --- a/planetstack/templates/admin/base.html +++ b/planetstack/templates/admin/base.html @@ -2,6 +2,7 @@ {% block title %} {%if title %} {{ title }} | {% endif %} {{ 'ADMIN_NAME'|suit_conf }}{% endblock %} + -- 2.43.0