Skip to content

Commit

Permalink
RDISCROWD-5743 task browse bookmarks (add CSRF ignore) (#834)
Browse files Browse the repository at this point in the history
  • Loading branch information
n00rsy committed Mar 30, 2023
1 parent c6fc262 commit 3f5347c
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion pybossa/view/account.py
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,7 @@
from flask_babel import gettext
from flask_wtf.csrf import generate_csrf
from flask import jsonify
from pybossa.core import signer, uploader, sentinel, newsletter
from pybossa.core import signer, uploader, sentinel, newsletter, csrf
from pybossa.util import Pagination, handle_content_type, admin_required
from pybossa.util import admin_or_subadmin_required
from pybossa.util import get_user_signup_method, generate_invitation_email_for_new_user
Expand Down Expand Up @@ -1201,6 +1201,7 @@ def _delete_bookmark(user_name, short_name, bookmark_name):

@blueprint.route('/<user_name>/taskbrowse_bookmarks/<short_name>', methods=['GET', 'POST', 'DELETE'])
@login_required
@csrf.exempt
def taskbrowse_bookmarks(user_name, short_name):
if current_user.name != user_name:
return abort(404)
Expand Down

0 comments on commit 3f5347c

Please sign in to comment.