From 205335236a10f6d356a17d9a3fe579a399bc6f8c Mon Sep 17 00:00:00 2001 From: Risiko <> Date: Wed, 12 Apr 2017 20:14:24 +0000 Subject: [PATCH] 98_weekprofile: fix handle csrfToken git-svn-id: https://svn.fhem.de/fhem/trunk@13977 2b470e98-0d58-463d-a4d8-8e2adae1ed80 --- fhem/CHANGED | 1 + fhem/www/pgm2/fhemweb_weekprofile.js | 6 +++++- 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/fhem/CHANGED b/fhem/CHANGED index ff8067bb7..cd24e9888 100644 --- a/fhem/CHANGED +++ b/fhem/CHANGED @@ -1,5 +1,6 @@ # Add changes at the top of the list. Keep it in ASCII, and 80-char wide. # Do not insert empty lines here, update check depends on it. + - bugfix: 98_weekprofile: handle csrfToken - bugfix: 02_HTTPSRV: strip parameters from filename - bugfix: 88_HMCCURPC: fixed binary RPC init procedure - feature: 93_DBLog: new version 2.16.3, new command addlog, diff --git a/fhem/www/pgm2/fhemweb_weekprofile.js b/fhem/www/pgm2/fhemweb_weekprofile.js index 38a5317ee..256b822bb 100644 --- a/fhem/www/pgm2/fhemweb_weekprofile.js +++ b/fhem/www/pgm2/fhemweb_weekprofile.js @@ -137,7 +137,11 @@ function weekprofile_DoEditWeek(devName,newPage) var widget = $('div[informid="'+devName+'"]').get(0); if (newPage == 1) { - window.location.assign(FW_root+'?cmd={weekprofile_editOnNewpage("'+widget.DEVICE+'","'+widget.CURTOPIC+':'+widget.CURPRF+'");;}'); + var csrfToken = $("body").attr('fwcsrf'); + var url = FW_root+'?cmd={weekprofile_editOnNewpage("'+widget.DEVICE+'","'+widget.CURTOPIC+':'+widget.CURPRF+'");;}'; + if (csrfToken) + url = url + '&fwcsrf='+ csrfToken; + window.location.assign(url); } else { widget.MODE = 'EDIT'; $(widget.MENU.BASE).hide();