CSRF token support in image upload

[helloflask]

CSRF token support in image upload

[greyli]

CKEditor use AJAX to send file, so you can use the code below to configure AJAX requests. This will add the CSRF token in X-CSRFToken header:

<script type="text/javascript">
    var csrf_token = "{{ csrf_token() }}";

    $.ajaxSetup({
        beforeSend: function(xhr, settings) {
            if (!/^(GET|HEAD|OPTIONS|TRACE)$/i.test(settings.type) && !this.crossDomain) {
                xhr.setRequestHeader("X-CSRFToken", csrf_token);
            }
        }
    });
</script>

[greyli]

Implemented in 0.4.3. Just set CKEDITOR_ENABLE_CSRF to True.

[greyli]

I’ll close this issue for now. Please feel free to comment further or re-open this issue if you wish.