From: Tom Hughes <tom@compton.nu>
Date: Mon, 2 Jan 2017 22:50:59 +0000 (+0000)
Subject: Make export form send authenticity token
X-Git-Tag: live~3667
X-Git-Url: https://git.openstreetmap.org/rails.git/commitdiff_plain/93631482ce4d3bdebe29151759cbeccd178086d3

Make export form send authenticity token
---

diff --git a/app/assets/javascripts/leaflet.share.js b/app/assets/javascripts/leaflet.share.js
index a6b10821e..7cfd50c8e 100644
--- a/app/assets/javascripts/leaflet.share.js
+++ b/app/assets/javascripts/leaflet.share.js
@@ -213,6 +213,15 @@ L.OSM.share = function (options) {
       .attr('type', 'hidden')
       .appendTo($form);
 
+    var csrf_param = $("meta[name=csrf-param]").attr("content"),
+        csrf_token = $("meta[name=csrf-token]").attr("content");
+
+    $('<input>')
+      .attr('name', csrf_param)
+      .attr('value', csrf_token)
+      .attr('type', 'hidden')
+      .appendTo($form);
+
     $('<p>')
       .attr('class', 'deemphasize')
       .html(I18n.t('javascripts.share.image_size') + ' <span id="mapnik_image_width"></span> x <span id="mapnik_image_height"></span>')