mirror of
				https://github.com/graphql-python/graphene-django.git
				synced 2025-11-04 18:08:01 +03:00 
			
		
		
		
	Read csrftoken from DOM if no cookie is set (#826)
This commit is contained in:
		
							parent
							
								
									3d01acf169
								
							
						
					
					
						commit
						45df7445f4
					
				| 
						 | 
					@ -3,8 +3,11 @@
 | 
				
			||||||
  // Parse the cookie value for a CSRF token
 | 
					  // Parse the cookie value for a CSRF token
 | 
				
			||||||
  var csrftoken;
 | 
					  var csrftoken;
 | 
				
			||||||
  var cookies = ('; ' + document.cookie).split('; csrftoken=');
 | 
					  var cookies = ('; ' + document.cookie).split('; csrftoken=');
 | 
				
			||||||
  if (cookies.length == 2)
 | 
					  if (cookies.length == 2) {
 | 
				
			||||||
    csrftoken = cookies.pop().split(';').shift();
 | 
					    csrftoken = cookies.pop().split(';').shift();
 | 
				
			||||||
 | 
					  } else {
 | 
				
			||||||
 | 
					    csrftoken = document.querySelector("[name=csrfmiddlewaretoken]").value;
 | 
				
			||||||
 | 
					  }
 | 
				
			||||||
 | 
					
 | 
				
			||||||
  // Collect the URL parameters
 | 
					  // Collect the URL parameters
 | 
				
			||||||
  var parameters = {};
 | 
					  var parameters = {};
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -31,6 +31,7 @@ add "&raw" to the end of the URL within a browser.
 | 
				
			||||||
          crossorigin="anonymous"></script>
 | 
					          crossorigin="anonymous"></script>
 | 
				
			||||||
</head>
 | 
					</head>
 | 
				
			||||||
<body>
 | 
					<body>
 | 
				
			||||||
 | 
					  {% csrf_token %}
 | 
				
			||||||
  <script src="{% static 'graphene_django/graphiql.js' %}"></script>
 | 
					  <script src="{% static 'graphene_django/graphiql.js' %}"></script>
 | 
				
			||||||
</body>
 | 
					</body>
 | 
				
			||||||
</html>
 | 
					</html>
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
		Loading…
	
		Reference in New Issue
	
	Block a user