05/24 Fix bugs CSRF error

2026-05-24 17:36:50 -04:00
parent 136b0e5635
commit 3f397c0163
2 changed files with 6 additions and 3 deletions
@@ -198,10 +198,12 @@ function getCsrfToken() {
 }

 /* ── Auto-inject CSRF token into every static POST form ─────── */
-document.addEventListener('DOMContentLoaded', () => {
+/* Called immediately — app.js is at the end of <body> so all   */
+/* forms are already in the DOM when this executes.             */
+(function injectCsrf() {
  const token = getCsrfToken();
  if (!token) return;
-  document.querySelectorAll('form').forEach(form => {
+  document.querySelectorAll('form').forEach(function(form) {
    if ((form.getAttribute('method') || '').toLowerCase() !== 'post') return;
    if (form.querySelector('input[name="csrf_token"]')) return;
    const input = document.createElement('input');
@@ -210,7 +212,7 @@ document.addEventListener('DOMContentLoaded', () => {
    input.value = token;
    form.appendChild(input);
  });
-});
+}());

 /* ── Generic fetch-based form submit (JSON response) ───────── */
 async function submitJson(url, data, method = 'POST') {