gsadmin/pulse
1
0
Fork 0
mirror of https://github.com/rcourtman/Pulse.git synced 2026-09-22 19:23:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: add CSRF token to export/import requests

Browse Source 
- Export/import now includes X-CSRF-Token header from cookie
- Fixes 403 Forbidden error when exporting with session auth
- Both export and import endpoints now properly validate CSRF tokens
This commit is contained in:
Pulse Monitor
2025-08-14 09:34:54 +00:00
parent 8ed9054a63
commit 6f792fb40b
1 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
frontend-modern/src/components/Settings/Settings.tsx
+22
View File
@@ -561,10 +561,21 @@ const Settings: Component = () => {
}
try {
// Get CSRF token from cookie
const csrfToken = document.cookie
.split('; ')
.find(row => row.startsWith('pulse_csrf='))
?.split('=')[1];
const headers: HeadersInit = {
'Content-Type': 'application/json',
};
// Add CSRF token if available
if (csrfToken) {
headers['X-CSRF-Token'] = csrfToken;
}
// Add API token if configured
const apiToken = localStorage.getItem('apiToken');
if (apiToken) {
@@ -659,10 +670,21 @@ const Settings: Component = () => {
return;
}
// Get CSRF token from cookie
const csrfToken = document.cookie
.split('; ')
.find(row => row.startsWith('pulse_csrf='))
?.split('=')[1];
const headers: HeadersInit = {
'Content-Type': 'application/json',
};
// Add CSRF token if available
if (csrfToken) {
headers['X-CSRF-Token'] = csrfToken;
}
// Add API token if configured
const apiToken = localStorage.getItem('apiToken');
if (apiToken) {