web: Always set the XSRF token in the environment

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/src/web/base.py b/src/web/base.py
index 5f914c0fce6290ac9cc993eeb71a7b56765b932f..df79677bac872d155e3a28ec2ed84de800f865cd 100644 (file)
--- a/src/web/base.py
+++ b/src/web/base.py
@@ -302,6 +302,9 @@ class BaseHandler(tornado.web.RequestHandler):
                # Fetch the locale
                locale = await self.get_user_locale()
 
+               # Make a new XSRF token
+               xsrf_token = await self._make_xsrf_token()
+
                ns = {
                        "handler"         : self,
                        "current_user"    : current_user,
@@ -315,6 +318,7 @@ class BaseHandler(tornado.web.RequestHandler):
                        "pgettext"        : locale.pgettext,
 
                        # XSRF Stuff
+                       "xsrf_token"      : xsrf_token,
                        "xsrf_form_html"  : self.xsrf_form_html,
                }