mirror of
https://github.com/cnodejs/nodeclub.git
synced 2026-02-01 16:34:28 +00:00
fixed csrf bug in mark message read
This commit is contained in:
parent
fc51e5c0e6
commit
7921025aa6
@ -55,7 +55,11 @@ $(document).ready(function() {
|
||||
$('.mark_read_btn').click(function() {
|
||||
var $me = $(this);
|
||||
var message_id = $me.parent().attr('message_id');
|
||||
$.post('/messages/mark_read',{ message_id: message_id }, function(data) {
|
||||
var data = {
|
||||
message_id: message_id,
|
||||
_csrf: '<%- csrf %>'
|
||||
};
|
||||
$.post('/messages/mark_read', data, function(data) {
|
||||
if (data.status === 'success') {
|
||||
$me.parent().toggleClass('message');
|
||||
$me.parent().find('.marked_icon').show();
|
||||
@ -67,7 +71,7 @@ $(document).ready(function() {
|
||||
});
|
||||
$('#mark_all_messages_btn').click(function() {
|
||||
var $parent = $(this).parent().parent();
|
||||
$.post('/messages/mark_all_read', {}, function(data) {
|
||||
$.post('/messages/mark_all_read', { _csrf: '<%- csrf %>' }, function(data) {
|
||||
if (data.status === 'success') {
|
||||
$parent.find('.message').each(function() {
|
||||
$me = $(this);
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user