nngo/WebChecker--Web-app-
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

05/24 Fix bugs CSRF error

Browse Source
This commit is contained in:
nngo
2026-05-24 17:36:50 -04:00
parent 136b0e5635
commit 3f397c0163
2 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
static/js/app.js
+5 -3
View File
@@ -198,10 +198,12 @@ function getCsrfToken() {
} }
/* ── Auto-inject CSRF token into every static POST form ─────── */ /* ── Auto-inject CSRF token into every static POST form ─────── */
document.addEventListener('DOMContentLoaded', () => { /* Called immediately — app.js is at the end of <body> so all */
/* forms are already in the DOM when this executes. */
(function injectCsrf() {
const token = getCsrfToken(); const token = getCsrfToken();
if (!token) return; if (!token) return;
document.querySelectorAll('form').forEach(form => { document.querySelectorAll('form').forEach(function(form) {
if ((form.getAttribute('method') || '').toLowerCase() !== 'post') return; if ((form.getAttribute('method') || '').toLowerCase() !== 'post') return;
if (form.querySelector('input[name="csrf_token"]')) return; if (form.querySelector('input[name="csrf_token"]')) return;
const input = document.createElement('input'); const input = document.createElement('input');
@@ -210,7 +212,7 @@ document.addEventListener('DOMContentLoaded', () => {
input.value = token; input.value = token;
form.appendChild(input); form.appendChild(input);
}); });
}); }());
/* ── Generic fetch-based form submit (JSON response) ───────── */ /* ── Generic fetch-based form submit (JSON response) ───────── */
async function submitJson(url, data, method = 'POST') { async function submitJson(url, data, method = 'POST') {
templates/login.html
+1
View File
@@ -20,6 +20,7 @@
{% endif %} {% endif %}
<form method="post" action="{{ url_for('auth.login') }}"> <form method="post" action="{{ url_for('auth.login') }}">
<input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
<div class="form-group"> <div class="form-group">
<label for="username">Username</label> <label for="username">Username</label>
<input type="text" id="username" name="username" <input type="text" id="username" name="username"