rainbownapkin/canopy
1
0
Fork 0
Code Issues 5 Pull requests Projects Releases Packages Wiki Activity Actions

Protected socket.io connection with csrf-sync to prevent cross-site connections.

Browse source
This commit is contained in:
rainbow napkin 2024-12-29 23:06:11 -05:00
parent 6c379321f7
commit 4a865e8aa8
3 changed files with 16 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

7
www/js/channel/channel.js
View file

@ -35,7 +35,12 @@ class channel{
}
connect(){
this.socket = io();
this.socket = io({
extraHeaders: {
//Include CSRF token
'x-csrf-token': utils.ajax.getCSRFToken()
}
});
}
defineListeners(){