alex/voyage
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: include Referer header and ensure CSRF token is set in request headers

Browse Source
This commit is contained in:
Sean Morley
2025-01-13 19:47:19 -05:00
parent a8e84be28e
commit 96ff727b57
1 changed files with 3 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
frontend/src/routes/+page.server.ts
View File

@@ -37,8 +37,9 @@ export const actions: Actions = {
method: 'DELETE', method: 'DELETE',
headers: { headers: {
'Content-Type': 'application/json', 'Content-Type': 'application/json',
Cookie: `sessionid=${sessionId}; csrftoken=${csrfToken}`, 'X-CSRFToken': csrfToken, // Ensure CSRF token is in header
'X-CSRFToken': csrfToken Referer: event.url.origin, // Include Referer header
Cookie: `sessionid=${sessionId}; csrftoken=${csrfToken}`
}, },
credentials: 'include' credentials: 'include'
}); });
@@ -59,8 +60,6 @@ export const actions: Actions = {
cookieDomain = undefined; // Do not set the domain cookieDomain = undefined; // Do not set the domain
} }
console.log('Deleting sessionid cookie with domain:', cookieDomain);
// Delete the session cookie // Delete the session cookie
event.cookies.delete('sessionid', { event.cookies.delete('sessionid', {
path: '/', path: '/',