Lev Lazinskiy

// app/__init__.py
csrf = CsrfProtect()
def create_app(config_name):
…
csrf.init_app(app)
…
return app

// app/templates/app/app_base.html
// This works because csrf_token() is in the global scope.
<meta name=“csrf-token” content="  csrf_token() " />

// frontend/js/src/braindump.editor.js
saveNote: function(id, content) {
    var csrftoken = $('meta[name=csrf-token]').attr('content')

    $.ajax({
            beforeSend: function(xhr) {
                    xhr.setRequestHeader("X-CSRFToken", csrftoken)
            },
            url: `/edit/<span class="cp">${</span><span class="nb">id</span><span class="cp">}</span>`,
            data: JSON.stringify({
                    'body': content,
            }),
            contentType: 'application/json',
            type: 'PUT',
            success: function (response) {
                    console.log(response);
            },
            error: function (error) {
                    console.error(error);
            }
    });

},

Thank you for reading! Share your thoughts with me on bluesky, mastodon, or via email.

Check out some more stuff to read down below.

Most popular posts this month

• 2024
• Reinstalling Windows at 1am
• SQLite DB Migrations with PRAGMA user_version
• My Custom Miniflux CSS Theme
• How to Disable Wayland in Debian Testing

Recent Favorite Blog Posts

This is a collection of the last 8 posts that I bookmarked.

• Underused Techniques for Effective Emails from Refactoring English
• Death by a thousand slops from daniel.haxx.se
• The AGI economy is coming faster than you think from Freethink
• Rolling the ladder up behind us from Xe Iaso's blog
• In Praise of “Normal” Engineers from charity.wtf
• Reports of Bluesky's death have been greatly exaggerated from The Torment Nexus
• What Would a Kubernetes 2.0 Look Like from matduggan.com
• We Can Just Measure Things from Armin Ronacher's Thoughts and Writings