Skip to content

Commit 77c4ddb

Browse files
authored
PSE-5085: Adding CSRF headers to Gift Card submit logic (#24)
1 parent aa12764 commit 77c4ddb

File tree

1 file changed

+14
-1
lines changed

1 file changed

+14
-1
lines changed

assets/js/dist/bentobox.dist.js

Lines changed: 14 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -341,19 +341,32 @@
341341
var form = button.closest('form');
342342
var dataString = form.serialize();
343343
var successCallback = options.successCallback || gc.formSubmitSuccess;
344+
var csrfHeaders = {};
344345

345346
gc.clearErrors(form);
346347

347348
if (!gc.validateForm(form)) {
348349
return false;
349350
}
350351

352+
$.ajax({
353+
type: 'GET',
354+
url: '/csrf',
355+
contentType: 'application/json',
356+
async: false,
357+
error: gc.formSubmitError,
358+
success: function(csrfData) {
359+
csrfHeaders = { 'X-CSRFToken': csrfData.token };
360+
}
361+
});
362+
351363
$.ajax({
352364
type: "POST",
353365
url: form.attr('action'),
354366
data: dataString,
355367
success: successCallback,
356-
error: gc.formSubmitError
368+
error: gc.formSubmitError,
369+
headers: csrfHeaders
357370
});
358371

359372
gc.currentForm = form;

0 commit comments

Comments
 (0)