asc/benchcoach
1
0
Fork 0
Code Issues 1 Pull Requests Packages Projects Releases Wiki Activity

csrf fix when added lineup

Browse Source
This commit is contained in:
Anthony Correa
2024-03-22 16:03:57 -05:00
parent 87735f76b5
commit d484f8cfdf
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/public/js/eventlineup.js
View File

@@ -610,6 +610,7 @@ function insertLineup(direction, teamId, eventId, element) {
const new_lineup_doc = parser.parseFromString(html, 'text/html') const new_lineup_doc = parser.parseFromString(html, 'text/html')
const new_lineup_doc_node = new_lineup_doc.firstElementChild.querySelector('[id*=event-lineup]') const new_lineup_doc_node = new_lineup_doc.firstElementChild.querySelector('[id*=event-lineup]')
const main = document.querySelector("main") const main = document.querySelector("main")
const new_csrf_token = new_lineup_doc.querySelector('form input[name=csrfToken]').value
direction > 0 ? main.appendChild(new_lineup_doc_node) : main.insertBefore(new_lineup_doc_node, element.closest('[id*=event-lineup]')) direction > 0 ? main.appendChild(new_lineup_doc_node) : main.insertBefore(new_lineup_doc_node, element.closest('[id*=event-lineup]'))
@@ -625,6 +626,9 @@ function insertLineup(direction, teamId, eventId, element) {
Array.from(document.querySelectorAll("[id^=event-lineup] .Panel")).forEach((bcLineupPanel) => { Array.from(document.querySelectorAll("[id^=event-lineup] .Panel")).forEach((bcLineupPanel) => {
bcLineupPanel.classList.remove('Panel--full') bcLineupPanel.classList.remove('Panel--full')
}) })
for (input of document.querySelectorAll("form input[name=csrfToken]")){
input.value = new_csrf_token
}
initPage(); initPage();
}) })