Przeglądaj źródła

[doc2] Check CSRF token when importing and exporting docs

Jenny Kim 9 lat temu
rodzic
commit
40ac1d5
1 zmienionych plików z 3 dodań i 0 usunięć
  1. 3 0
      desktop/core/src/desktop/api2.py

+ 3 - 0
desktop/core/src/desktop/api2.py

@@ -29,6 +29,7 @@ from django.core import management
 from django.http import HttpResponse
 from django.shortcuts import redirect
 from django.utils.translation import ugettext as _
+from django.views.decorators.csrf import ensure_csrf_cookie
 from django.views.decorators.http import require_POST
 
 from desktop.lib.django_util import JsonResponse
@@ -298,6 +299,7 @@ def share_document(request):
   })
 
 
+@ensure_csrf_cookie
 def export_documents(request):
   if request.GET.get('documents'):
     selection = json.loads(request.GET.get('documents'))
@@ -339,6 +341,7 @@ def export_documents(request):
     return make_response(f.getvalue(), 'json', 'hue-documents')
 
 
+@ensure_csrf_cookie
 def import_documents(request):
   if request.FILES.get('documents'):
     documents = request.FILES['documents'].read()