Merge pull request #197 from delcroip/develop

add csrf tocker in clock
delcroip · Jul 30, 2022 · ca746e8 · ca746e8
2 parents 6dd3b24 + 203cff7
commit ca746e8
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/htdocs/timesheet/core/js/stopWatch.js b/htdocs/timesheet/core/js/stopWatch.js
@@ -175,8 +175,9 @@ class Stopwatch {
             this.event.note=document.getElementById("eventNote").value;
             this.event.event_location_ref="Browser:"+window.navigator.userAgent.replace(/\D+/g, '');
             this.event.userid=this.userid;
-            return 'json='+JSON.stringify(this.event);
-        }else return '';
+
+            return 'json='+JSON.stringify(this.event) + "\ntoken=" + document.getElementById('csrf-token').value;
+        }else return 'token='+ document.getElementById('csrf-token').value;
     }
     //sent a POST request to create a stop event
     stop() {