From 3dd681ebce3a7c4358c5f77547f5965a88aa1780 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bar=C4=B1=C5=9F=20Soner=20U=C5=9Fakl=C4=B1?= Date: Sun, 28 Nov 2021 06:42:19 -0500 Subject: [PATCH] fix: error pages dont have config.csrf_token --- src/controllers/errors.js | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/controllers/errors.js b/src/controllers/errors.js index 58f12d9f98..81e7fddebd 100644 --- a/src/controllers/errors.js +++ b/src/controllers/errors.js @@ -79,6 +79,9 @@ exports.handleErrors = async function handleErrors(err, req, res, next) { // esl if (res.locals.isAPI) { res.json(data); } else { + if (req.method === 'GET') { + await middleware.applyCSRFasync(req, res); + } await middleware.buildHeaderAsync(req, res); res.render('500', data); }