use csrf token

MuckRock · Jul 31, 2024 · f0f1e68 · f0f1e68
1 parent abebee5
commit f0f1e68
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/app.js b/app.js
@@ -187,10 +187,12 @@ function update() {
 function tag() {
   var id = document.getElementById("tag_id").value;
   const url = `https://api.www.documentcloud.org/api/documents/${id}/data/test_key/`;
+  const token = ('; '+document.cookie).split(`; csrftoken=`).pop().split(';')[0];
   fetch(url, {
     method: "PUT",
     credentials: "include",
     headers: {
+      "X-CSRFToken": token,
       "Content-Type": "application/json",
     },
     body: JSON.stringify({"values": ["test_value"]})