From 8926bba2db426fa78a5cace09fe9d71bf585df94 Mon Sep 17 00:00:00 2001 From: Fernando Valverde Date: Tue, 1 Mar 2022 13:33:08 -0600 Subject: [PATCH] Use meta tag CSRF and not window.csrfToken (#49) * Use meta tag CSRF and not window.csrfToken * Typo - my bad it should use .content instead of .value --- Sources/ForemWebView/ForemWebView.swift | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Sources/ForemWebView/ForemWebView.swift b/Sources/ForemWebView/ForemWebView.swift index f9acfc1..30503bc 100644 --- a/Sources/ForemWebView/ForemWebView.swift +++ b/Sources/ForemWebView/ForemWebView.swift @@ -138,7 +138,8 @@ open class ForemWebView: WKWebView { // Function that fetches the CSRF Token required for direct interaction with the Forem servers func fetchCSRF(completion: @escaping (String?) -> Void) { - evaluateJavaScript(wrappedJS("window.csrfToken")) { result, error in + let javascript = "document.querySelector(`meta[name='csrf-token']`)?.content" + evaluateJavaScript(wrappedJS(javascript)) { result, error in if let error = error { print("Unable to fetch CSRF Token: \(error.localizedDescription)") completion(nil)