Add CSRF protection to every API call

2013-12-28 14:07:44 -05:00 · 2013-12-28 14:07:44 -05:00 · 21ac1c9210
commit 21ac1c9210
parent 2e3be90054
3 changed files with 28 additions and 1 deletions
--- a/templates/base.html
+++ b/templates/base.html
@ -67,6 +67,7 @@

    <script type="text/javascript">
      window.__endpoints = {{ route_data|safe }}.endpoints;
+      window.__token = '{{ csrf_token() }}';
    </script>

    <script src="static/js/app.js"></script>