Added CSRF tokens to non-partial templates.
This commit is contained in:
parent
2ea3c72a61
commit
83f76af6e8
24 changed files with 94 additions and 22 deletions
|
|
@ -16,6 +16,7 @@ along with this program. If not, see <https://www.gnu.org/licenses/>.*/
|
|||
|
||||
//Local Imports
|
||||
const {userModel} = require('../schemas/user/userSchema');
|
||||
const csrfUtils = require('../utils/csrfUtils');
|
||||
const {exceptionHandler, errorHandler} = require('../utils/loggerUtils');
|
||||
|
||||
//Config
|
||||
|
|
@ -27,18 +28,21 @@ module.exports.get = async function(req, res){
|
|||
try{
|
||||
var profileName = req.url.slice(1) == '' ? (req.session.user ? req.session.user.user : null) : req.url.slice(1);
|
||||
|
||||
const profile = await userModel.findProfile({user: profileName})
|
||||
const profile = await userModel.findProfile({user: profileName});
|
||||
|
||||
if(profile){
|
||||
res.render('profile', {
|
||||
instance: config.instanceName,
|
||||
user: req.session.user,
|
||||
profile
|
||||
profile,
|
||||
csrfToken: csrfUtils.generateToken(req)
|
||||
});
|
||||
}else{
|
||||
res.render('profile', {instance: config.instanceName,
|
||||
res.render('profile', {
|
||||
instance: config.instanceName,
|
||||
user: req.session.user,
|
||||
profile: null
|
||||
profile: null,
|
||||
csrfToken: csrfUtils.generateToken(req)
|
||||
});
|
||||
}
|
||||
}catch(err){
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue