From 5039d8fd0b7e3784bbb3ef4db5fe0d93e9f13fb6 Mon Sep 17 00:00:00 2001 From: Flavio Copes Date: Thu, 19 Nov 2015 22:43:14 +0100 Subject: [PATCH] Fix page media nonce on post actions --- .../templates/forms/fields/pagemedia/pagemedia.html.twig | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/themes/grav/templates/forms/fields/pagemedia/pagemedia.html.twig b/themes/grav/templates/forms/fields/pagemedia/pagemedia.html.twig index 5489ee90..099470c0 100644 --- a/themes/grav/templates/forms/fields/pagemedia/pagemedia.html.twig +++ b/themes/grav/templates/forms/fields/pagemedia/pagemedia.html.twig @@ -109,7 +109,7 @@ this.on('removedfile', function(file) { if (!file.accepted || file.rejected) return; thisDropzone = this; - $.post(URI + '/task{{ config.system.param_sep }}delmedia', {filename: file.name}, function(data){ + $.post(URI + '/task{{ config.system.param_sep }}delmedia', {filename: file.name, 'admin-nonce': $('#admin-nonce').val()}, function(data){ $.proxy(modalError, thisDropzone, { file: file, data: data, @@ -118,6 +118,10 @@ })(); }); }); + + this.on('sending', function(file, xhr, formData){ + formData.append('admin-nonce', $('#admin-nonce').val()); + }); } };