mirror of
				https://github.com/graphql-python/graphene-django.git
				synced 2025-10-31 07:57:31 +03:00 
			
		
		
		
	Read csrftoken from DOM if no cookie is set (#826)
This commit is contained in:
		
							parent
							
								
									3d01acf169
								
							
						
					
					
						commit
						45df7445f4
					
				|  | @ -3,8 +3,11 @@ | ||||||
|   // Parse the cookie value for a CSRF token
 |   // Parse the cookie value for a CSRF token
 | ||||||
|   var csrftoken; |   var csrftoken; | ||||||
|   var cookies = ('; ' + document.cookie).split('; csrftoken='); |   var cookies = ('; ' + document.cookie).split('; csrftoken='); | ||||||
|   if (cookies.length == 2) |   if (cookies.length == 2) { | ||||||
|     csrftoken = cookies.pop().split(';').shift(); |     csrftoken = cookies.pop().split(';').shift(); | ||||||
|  |   } else { | ||||||
|  |     csrftoken = document.querySelector("[name=csrfmiddlewaretoken]").value; | ||||||
|  |   } | ||||||
| 
 | 
 | ||||||
|   // Collect the URL parameters
 |   // Collect the URL parameters
 | ||||||
|   var parameters = {}; |   var parameters = {}; | ||||||
|  |  | ||||||
|  | @ -31,6 +31,7 @@ add "&raw" to the end of the URL within a browser. | ||||||
|           crossorigin="anonymous"></script> |           crossorigin="anonymous"></script> | ||||||
| </head> | </head> | ||||||
| <body> | <body> | ||||||
|  |   {% csrf_token %} | ||||||
|   <script src="{% static 'graphene_django/graphiql.js' %}"></script> |   <script src="{% static 'graphene_django/graphiql.js' %}"></script> | ||||||
| </body> | </body> | ||||||
| </html> | </html> | ||||||
|  |  | ||||||
		Loading…
	
		Reference in New Issue
	
	Block a user