fix: exclude csrfmiddlewaretoken in new ticket form data

UniversitaDellaCalabria · Oct 5, 2022 · 96f76f4 · 96f76f4
1 parent f982458
commit 96f76f4
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/uniticket/uni_ticket/views/user.py b/uniticket/uni_ticket/views/user.py
@@ -654,6 +654,7 @@ def post(self, request, structure_slug, category_slug, api=False):
                         TICKET_CREATE_BUTTON_NAME,
                         TICKET_COMPILED_BY_USER_NAME,
                         TICKET_COMPILED_CREATION_DATE,
+                        'csrfmiddlewaretoken',
                     ]
                 )
 
@@ -662,6 +663,7 @@ def post(self, request, structure_slug, category_slug, api=False):
                 for i in fields_to_pop:
                     if i in form_data:
                         form_data.pop(i)
+
                 # make a UUID based on the host ID and current time
                 code = uuid_code()