stephan/bloombase
1
0
Fork 0
Code Issues 9 Pull requests Projects Releases Packages Wiki Activity Actions

fix: ensure CSRF cookie is set on plant_add page load

Browse source 
species_search.html has no form/csrf_token tag, so the cookie was
never set before the species select form was submitted.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Stephan Kerkman 2026-05-28 10:32:51 +02:00
parent 34f6c3652e
commit d8d7899a26
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
plants/views/plants.py
View file

@ -1,5 +1,6 @@
from datetime import date from datetime import date
from django.shortcuts import render, get_object_or_404, redirect from django.shortcuts import render, get_object_or_404, redirect
from django.views.decorators.csrf import ensure_csrf_cookie
from django.views.decorators.http import require_POST from django.views.decorators.http import require_POST
from plants.models import Plant, Species, PruningLog from plants.models import Plant, Species, PruningLog
from plants.forms import PlantForm, PruningLogForm from plants.forms import PlantForm, PruningLogForm
@ -58,6 +59,7 @@ def log_pruning(request, pk):
}) })
@ensure_csrf_cookie
def plant_add(request): def plant_add(request):
species_id = request.GET.get('species_id') or request.POST.get('species_id') species_id = request.GET.get('species_id') or request.POST.get('species_id')
species = None species = None