Add some missing csrf tokens that broke project hiding and icon uploads

Signed-off-by: Walker Crouse <walkercrouse@hotmail.com>
SpongePowered · Jan 7, 2017 · 09e02cd · 09e02cd
1 parent 1837b0c
commit 09e02cd
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 2 deletions.
diff --git a/build.sbt b/build.sbt
@@ -1,6 +1,6 @@
 name := "ore"
 
-version := "1.1.10"
+version := "1.1.11"
 
 lazy val `ore` = (project in file(".")).enablePlugins(PlayScala)
 

diff --git a/public/javascripts/hideProject.js b/public/javascripts/hideProject.js
@@ -35,6 +35,7 @@ $(function() {
         $.ajax({
             type: 'post',
             url: '/' + project + '/visible/' + !visible,
+            data: { csrfToken: csrf },
             fail: function () {
                 spinner.addClass(iconClass).removeClass('fa-spinner fa-spin');
             },

diff --git a/public/javascripts/iconUpload.js b/public/javascripts/iconUpload.js
@@ -35,14 +35,17 @@ $(function() {
     var btn = form.find('.btn-upload');
     var url = '/' + PROJECT_OWNER + '/' + PROJECT_SLUG + '/icon';
     var preview = form.find('.user-avatar');
-    var input = form.find('input');
+    var input = form.find('input[type="file"]');
 
     function updateButton() {
         btn.prop('disabled', input[0].files.length == 0);
     }
 
     input.on('change', function() { updateButton(); });
 
+    var formData = new FormData(form[0]);
+    formData.append('csrfToken', csrf);
+
     // Upload button
     btn.click(function(e) {
         e.preventDefault();