Make the special page add a hidden input with the CSRF token to the HTML, then update the JS to add the token to the Vue-rendered form. (The PHP-generated hidden input will eventually be used by the noJS version of the special page, but we’re not there yet.)
Description
Description
Details
Details
Related Changes in Gerrit:
Customize query in gerrit
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | Lydia_Pintscher | T298134 Input of data about the new Lexeme | |||
| Resolved | Lucas_Werkmeister_WMDE | T298153 ‘Submit’ Button functionality to create the new Lexeme | |||
| Resolved | Lucas_Werkmeister_WMDE | T302001 Add CSRF token to new lexeme form |
Event Timeline
Comment Actions
This turns out to be easier than expected due to the existence of mw.user.tokens.get().csrfToken – no PHP-side hidden input necessary (yet).
Comment Actions
Change 763713 had a related patch set uploaded (by Michael Große; author: Michael Große):
[mediawiki/extensions/WikibaseLexeme@master] Provide csrf token to NewLexeme form
Comment Actions
Change 763713 merged by jenkins-bot:
[mediawiki/extensions/WikibaseLexeme@master] Provide csrf token to NewLexeme form
Comment Actions
Change 766795 had a related patch set uploaded (by Urbanecm; author: Urbanecm):
[mediawiki/extensions/WikibaseLexeme@master] Revert \"Provide csrf token to NewLexeme form\"
Comment Actions
Change 766795 merged by jenkins-bot:
[mediawiki/extensions/WikibaseLexeme@master] Revert \"Provide csrf token to NewLexeme form\"
Comment Actions
Change 767061 had a related patch set uploaded (by Lucas Werkmeister (WMDE); author: Lucas Werkmeister (WMDE)):
[mediawiki/extensions/WikibaseLexeme@master] Provide csrf token to NewLexeme form (take 2)
Comment Actions
Change 767061 merged by jenkins-bot:
[mediawiki/extensions/WikibaseLexeme@master] Provide csrf token to NewLexeme form (take 2)