From 97b3e18b564eae8cd54f4d6ac35823ed06316145 Mon Sep 17 00:00:00 2001 From: usmannasir Date: Tue, 24 Feb 2026 02:15:51 +0500 Subject: [PATCH] Fix CSRF, Alpine.js load order, and API robustness in v2 panel - Add {% csrf_token %} to base.html to ensure CSRF cookie is set - Load v2.js before Alpine.js so alpine:init listeners register - Add @csrf_exempt on all API endpoints (matches v1 pattern, session auth in secMiddleware handles protection) - Normalize child domain create/delete responses from WebsiteManager HttpResponse into standard JSON format for frontend - Validate log_type to only allow 'access' or 'error' - Safely parse lines parameter in log viewer API --- panelv2/templates/panelv2/base.html | 7 +++++-- panelv2/views.py | 29 ++++++++++++++++++++++++++--- 2 files changed, 31 insertions(+), 5 deletions(-) diff --git a/panelv2/templates/panelv2/base.html b/panelv2/templates/panelv2/base.html index a3834c823..86f0b8951 100644 --- a/panelv2/templates/panelv2/base.html +++ b/panelv2/templates/panelv2/base.html @@ -47,6 +47,9 @@ + +{% csrf_token %} +