Merge remote-tracking branch 'bookmark_csrf/master'

2 years ago · f0399d04b7
parent 9b57fa25de 66874f8163
commit f0399d04b7
2 changed files with 5 additions and 1 deletions
--- a/cps/static/js/reading/epub.js
+++ b/cps/static/js/reading/epub.js
@ -61,11 +61,14 @@ var reader;
                this.removeBookmark(bookmark);
            }.bind(this));
        }
+        
+        var csrftoken = $("input[name='csrf_token']").val();

        // Save to database
        $.ajax(calibre.bookmarkUrl, {
            method: "post",
-            data: { bookmark: location || "" }
+            data: { bookmark: location || "" },
+            headers: { "X-CSRFToken": csrftoken }
        }).fail(function (xhr, status, error) {
            alert(error);
        });
--- a/cps/templates/read.html
+++ b/cps/templates/read.html
@ -17,6 +17,7 @@
    <body>
      <div id="sidebar">
        <div id="panels">
+          <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
          <!--input id="searchBox" placeholder="search" type="search"-->

          <!--a id="show-Search" class="show_view icon-search" data-view="Search">Search</a-->