mp3 player was missing the csrf_token

This commit is contained in:
Olivier 2022-10-11 19:50:23 +09:00
parent 3d59a78c9f
commit adfbd447ed
2 changed files with 12 additions and 3 deletions

View file

@ -177,6 +177,9 @@
whileplaying: function () { whileplaying: function () {
// get csrf_token
let csrf_token = $("input[name='csrf_token']").val();
//This sends a bookmark update to calibreweb every 30 seconds. //This sends a bookmark update to calibreweb every 30 seconds.
if (this.progressBuffer == undefined) { if (this.progressBuffer == undefined) {
@ -187,7 +190,10 @@
$.ajax(calibre.bookmarkUrl, { $.ajax(calibre.bookmarkUrl, {
method: "post", method: "post",
data: { bookmark: this.position } data: {
csrf_token: csrf_token,
bookmark: this.position
}
}).fail(function (xhr, status, error) { }).fail(function (xhr, status, error) {
console.error(error); console.error(error);
}); });
@ -313,14 +319,14 @@
}, },
onstop: function () { onstop: function () {
$.ajax(calibre.bookmarkUrl, { $.ajax(calibre.bookmarkUrl, {
method: "post", method: "post",
data: { bookmark: this.position } data: { bookmark: this.position }
}).fail(function (xhr, status, error) { }).fail(function (xhr, status, error) {
console.error(error); console.error(error);
}); });
utils.css.remove(dom.o, 'playing'); utils.css.remove(dom.o, 'playing');
}, },

View file

@ -114,6 +114,8 @@
</div> </div>
<input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
<script> <script>
soundManager.setup({ soundManager.setup({
useHTML5Audio: true, useHTML5Audio: true,
@ -137,6 +139,7 @@ window.calibre = {
bookmarkUrl: "{{ url_for('web.set_bookmark', book_id=mp3file, book_format=audioformat.upper()) }}", bookmarkUrl: "{{ url_for('web.set_bookmark', book_id=mp3file, book_format=audioformat.upper()) }}",
bookmark: "{{ bookmark.bookmark_key if bookmark != None }}", bookmark: "{{ bookmark.bookmark_key if bookmark != None }}",
useBookmarks: "{{ g.user.is_authenticated | tojson }}" useBookmarks: "{{ g.user.is_authenticated | tojson }}"
}; };
</script> </script>
</body> </body>