From: Michael Tremer <michael.tremer@ipfire.org>
Date: Tue, 21 Jan 2025 14:54:58 +0000 (+0000)
Subject: web: Always set the XSRF token in the environment
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=89de7bb02985a7fa9d3ef0f671c7790b7e4c6aee;p=pbs.git

web: Always set the XSRF token in the environment

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/src/web/base.py b/src/web/base.py
index 5f914c0f..df79677b 100644
--- a/src/web/base.py
+++ b/src/web/base.py
@@ -302,6 +302,9 @@ class BaseHandler(tornado.web.RequestHandler):
 		# Fetch the locale
 		locale = await self.get_user_locale()
 
+		# Make a new XSRF token
+		xsrf_token = await self._make_xsrf_token()
+
 		ns = {
 			"handler"         : self,
 			"current_user"    : current_user,
@@ -315,6 +318,7 @@ class BaseHandler(tornado.web.RequestHandler):
 			"pgettext"        : locale.pgettext,
 
 			# XSRF Stuff
+			"xsrf_token"      : xsrf_token,
 			"xsrf_form_html"  : self.xsrf_form_html,
 		}