arona/PyRIGS
1
0
Fork 0
mirror of https://github.com/nottinghamtec/PyRIGS.git synced 2026-01-27 10:22:17 +00:00
Code Issues Projects Releases Wiki Activity

Correct method of CRSF exemption for webhook reciever

Browse Source
This commit is contained in:
FreneticScribbler
2023-06-26 22:27:20 +01:00
parent 2c808d0adf
commit 039f9f68d3
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
RIGS/views/rigboard.py
View File

@@ -398,11 +398,14 @@ class CreateForumThread(generic.base.RedirectView):
'body': '<span class="hidden" id="event-id">{}</span>https://rigs.nottinghamtec.co.uk/event/{}'.format(event.pk, event.pk), 'body': '<span class="hidden" id="event-id">{}</span>https://rigs.nottinghamtec.co.uk/event/{}'.format(event.pk, event.pk),
'category': 'rig-info' 'category': 'rig-info'
} }
return 'https://forum.nottinghamtec.co.uk/new-topic' + "?" + urllib.parse.urlencode(params) return f'https://forum.nottinghamtec.co.uk/new-topic?{}'.format(urllib.parse.urlencode(params))
class RecieveForumWebhook(generic.View): class RecieveForumWebhook(generic.View):
@csrf_exempt @method_decorator(csrf_exempt)
def dispatch(self, request, *args, **kwargs):
return super().dispatch(request, *args, **kwargs)
def post(self, request, *args, **kwargs): def post(self, request, *args, **kwargs):
if request.POST.get('secret') == env('FORUM_WEBHOOK_SECRET'): if request.POST.get('secret') == env('FORUM_WEBHOOK_SECRET'):
event_id = BeautifulSoup(request.POST.get('body'), "html.parser") event_id = BeautifulSoup(request.POST.get('body'), "html.parser")