diff --git a/core/static/core/js/script.js b/core/static/core/js/script.js index 0fc49293..f152525f 100644 --- a/core/static/core/js/script.js +++ b/core/static/core/js/script.js @@ -47,18 +47,9 @@ function display_notif() { // You can't get the csrf token from the template in a widget // We get it from a cookie as a workaround, see this link // https://docs.djangoproject.com/en/2.0/ref/csrf/#ajax -function getCookie(cname) { - var name = cname + "="; - var decodedCookie = decodeURIComponent(document.cookie); - var ca = decodedCookie.split(';'); - for(var i = 0; i + + + {% csrf_token %} {% block header %} {% if not popup %} diff --git a/core/templates/core/markdown_textarea.jinja b/core/templates/core/markdown_textarea.jinja index 650438a4..d4579ebb 100644 --- a/core/templates/core/markdown_textarea.jinja +++ b/core/templates/core/markdown_textarea.jinja @@ -18,7 +18,7 @@ $.ajax({ url: "{{ markdown_api_url }}", method: "POST", - data: { text: plainText, csrfmiddlewaretoken: getCookie('csrftoken') }, + data: { text: plainText, csrfmiddlewaretoken: getCSRFToken() }, }).done(function (msg) { preview.innerHTML = msg; });