Lev Lazinskiy

// app/__init__.py
csrf = CsrfProtect()
def create_app(config_name):
…
csrf.init_app(app)
…
return app

// app/templates/app/app_base.html
// This works because csrf_token() is in the global scope.
<meta name=“csrf-token” content="  csrf_token() " />

// frontend/js/src/braindump.editor.js
saveNote: function(id, content) {
    var csrftoken = $('meta[name=csrf-token]').attr('content')

    $.ajax({
            beforeSend: function(xhr) {
                    xhr.setRequestHeader("X-CSRFToken", csrftoken)
            },
            url: `/edit/<span class="cp">${</span><span class="nb">id</span><span class="cp">}</span>`,
            data: JSON.stringify({
                    'body': content,
            }),
            contentType: 'application/json',
            type: 'PUT',
            success: function (response) {
                    console.log(response);
            },
            error: function (error) {
                    console.error(error);
            }
    });

},

Thank you for reading! Share your thoughts with me on bluesky, mastodon, or via email.

Check out some more stuff to read down below.

Most popular posts this month

• Now What?
• SQLite DB Migrations with PRAGMA user_version
• Setting up ANTLR4 on Windows
• Dagger Feels Like Magic
• Types and Roles If Not Exists in PostgreSQL

Recent Favorite Blog Posts

This is a collection of the last 8 posts that I bookmarked.

• Useful Bluesky Tools from Robb Knight • Posts • Atom Feed
• Re: Bluesky from Colin Devroe
• From the Red Hell to the Sky of Blue from Straphanger
• We don’t need to use what we make from Derek Sivers blog
• Ubuntu Summit 2024: A joyful experience filled with sorrow from Planet KDE | English
• Sabotage from jwz
• What if My Tribe Is Wrong? from Armin Ronacher's Thoughts and Writings
• It’s the “1998” of the AI Revolution. So Why Can I Safely Ignore It? from The Internet Review