From 159638084e167047b86fd65382f50cd099d4eb48 Mon Sep 17 00:00:00 2001
From: Brian Picciano <mediocregopher@gmail.com>
Date: Tue, 24 May 2022 17:27:03 -0600
Subject: Fix CSRF loading on static GET pages

---
 srv/src/http/tpl/load-csrf.html | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 srv/src/http/tpl/load-csrf.html

(limited to 'srv/src/http/tpl/load-csrf.html')

diff --git a/srv/src/http/tpl/load-csrf.html b/srv/src/http/tpl/load-csrf.html
new file mode 100644
index 0000000..b0757f9
--- /dev/null
+++ b/srv/src/http/tpl/load-csrf.html
@@ -0,0 +1,13 @@
+<script async type="module" src="{{ StaticURL "api.js" }}"></script>
+
+<script type="text/javascript">
+  (async () => {
+    const api = await import("{{ StaticURL "api.js" }}");
+    const res = await api.call("/api/csrf");
+
+    const els = document.getElementsByClassName("csrfHiddenInput");
+    for (let i = 0; i < els.length; i++) {
+      els[i].value = res.CSRFToken;
+    }
+  })();
+</script>
-- 
cgit v1.2.3