darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-08-23 15:57:23 -04:00
Code Issues Packages Projects Releases Wiki Activity

Fix 500 error from notifications/letter.json page

Browse Source 
The letters notification page makes ajax calls to update the status - these
were failing because it's making a POST request without a CSRF token.
(The email and SMS notification pages contain a search form that includes
the hidden CSRF input, so this was only occurring with the letters
page.)

This commit adds a hidden form for the letters page which just contains
the CSRF token.
This commit is contained in:
Katie Smith
2018-01-11 17:19:24 +00:00
parent 12df43ffb4
commit 7386d5ec1c
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
app/templates/views/notifications.html
View File

@@ -42,6 +42,10 @@
<input type="hidden" name="to" value="{{ search_form.to.data }}"> <input type="hidden" name="to" value="{{ search_form.to.data }}">
<input type="hidden" name="csrf_token" value="{{ csrf_token() }}"> <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
</form> </form>
{% else %}
<form id="search-form" method="post">
<input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
</form>
{% endif %} {% endif %}
<!--<p class="bottom-gutter">--> <!--<p class="bottom-gutter">-->
<!--<a href="{{ download_link }}" download="download" class="heading-small">Download this report</a>--> <!--<a href="{{ download_link }}" download="download" class="heading-small">Download this report</a>-->