From 69de76cb32cfd638672d4d5846d0659bf102316f Mon Sep 17 00:00:00 2001
From: Brian Picciano <mediocregopher@gmail.com>
Date: Tue, 17 May 2022 15:54:20 -0600
Subject: Add asset file upload form, plus related necessary refactors

---
 srv/src/api/csrf.go | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'srv/src/api/csrf.go')

diff --git a/srv/src/api/csrf.go b/srv/src/api/csrf.go
index 9717030..2a93ed7 100644
--- a/srv/src/api/csrf.go
+++ b/srv/src/api/csrf.go
@@ -10,6 +10,7 @@ import (
 const (
 	csrfTokenCookieName = "csrf_token"
 	csrfTokenHeaderName = "X-CSRF-Token"
+	csrfTokenFormName   = "csrfToken"
 )
 
 func setCSRFMiddleware(h http.Handler) http.Handler {
@@ -45,7 +46,7 @@ func checkCSRFMiddleware(h http.Handler) http.Handler {
 
 		givenCSRFTok := r.Header.Get(csrfTokenHeaderName)
 		if givenCSRFTok == "" {
-			givenCSRFTok = r.FormValue("csrfToken")
+			givenCSRFTok = r.FormValue(csrfTokenFormName)
 		}
 
 		if csrfTok == "" || givenCSRFTok != csrfTok {
-- 
cgit v1.2.3