Update csrf value to use value if present in context, then fall back to cookie.

Updated database samples. Added migrations for sample project models. Updated Category model to make order not editable.
2017-12-04 22:05:37 -05:00
parent f4daaeb232
commit d4f577fdf9
5 changed files with 237 additions and 2 deletions
@@ -16,7 +16,7 @@
        return cookieValue;
    }

-    var csrftoken = getCookie('{{ csrf_cookie_name }}');
+    var csrftoken = '{{ csrf_token }}' || getCookie('{{ csrf_cookie_name }}');

    function csrfSafeMethod(method) {
        // these HTTP methods do not require CSRF protection