From 712532a117f5f5c96735f02917b4fe7a176ee5c1 Mon Sep 17 00:00:00 2001
From: Holger Trampe <htrampe@gmail.com>
Date: Tue, 19 May 2020 22:03:29 +0200
Subject: [PATCH] csrf

---
 chat/templates/chat/chat_content.html         |  51 ++++++++----------
 .../__pycache__/settings.cpython-38.pyc       | Bin 4658 -> 4690 bytes
 digitaleagentur/settings.py                   |   1 +
 3 files changed, 23 insertions(+), 29 deletions(-)

diff --git a/chat/templates/chat/chat_content.html b/chat/templates/chat/chat_content.html
index 51ba63a..5fc8e9b 100644
--- a/chat/templates/chat/chat_content.html
+++ b/chat/templates/chat/chat_content.html
@@ -98,15 +98,7 @@
       </div>
     </div>
 
-    <script type="text/javascript">
-
-function scrollDown(){
-  //$('#chatmessages').animate({scrollTop: $('#chatmessages').prop("scrollHeight")}, 500);
-
-  
-
-}
-
+<script type="text/javascript">
 $(document).ready(function(){
     $('#chatcontentcomplete').scrollTop( $('#chatcontentcomplete').height()*200 )
 });
@@ -127,9 +119,6 @@ $(document).ready(function(){
        chatwebsocket = new WebSocket(ws_string+window.location.host+"/ws/chat/{{roomdata.creator.pk}}/{{roomdata.chatmember_single.pk}}/") 
       }
 
-      
-        
-     
       chatwebsocket.onmessage = function(e) {              
         datainfo = e["data"].split("__");        
         if(datainfo[0] == "starttyping")            
@@ -183,24 +172,28 @@ $(document).ready(function(){
       })
 
 
-      function sendNewMessage(){
-        $.ajax(
+      function sendNewMessage()
+      {
+        if($("#message").val().length > 0)
         {
-          type: "GET",
-          url: "{% url 'chat:chat-ajax' %}",
-          data : {
-            action : "addnewmessage",
-            new_chat_userid : userownid,
-            message : $("#message").val(),
-            room : {{roomdata.pk}}
-          },
-          success: function( data ) 
-          { 
-            $("#message").val("");
-            chatwebsocket.send("load__{{user.pk}}__privatechat_{{roomdata.creator.pk}}_{{roomdata.chatmember_single.pk}}");
-            chatwebsocket.send("stoptyping__{{user.pk}}__privatechat_{{roomdata.creator.pk}}_{{roomdata.chatmember_single.pk}}");
-          }
-       });
+          $.ajax(
+          {
+              type: "GET",
+              url: "{% url 'chat:chat-ajax' %}",
+              data : {
+                action : "addnewmessage",
+                new_chat_userid : userownid,
+                message : $("#message").val(),
+                room : {{roomdata.pk}}
+              },
+              success: function( data ) 
+              { 
+                $("#message").val("");
+                chatwebsocket.send("load__{{user.pk}}__privatechat_{{roomdata.creator.pk}}_{{roomdata.chatmember_single.pk}}");
+                chatwebsocket.send("stoptyping__{{user.pk}}__privatechat_{{roomdata.creator.pk}}_{{roomdata.chatmember_single.pk}}");
+              }
+            });
+        }
       }
 
 
diff --git a/digitaleagentur/__pycache__/settings.cpython-38.pyc b/digitaleagentur/__pycache__/settings.cpython-38.pyc
index 27091d98180b5eecbf3d727208cd099c98295774..3f66ad3fe84edfedea787a0af4ce0eccb96dcd23 100644
GIT binary patch
delta 311
zcmXYt%`O806oq?7nF*aR$t2QNDOyx1^;3=CR*N*DW!ffO`hzpZScw<t(o!a~?ZUi*
zzJl1;S$YL8AYozBILSGSZ*lI;d5L^P<f<(9dt5zkyw<-gIYggUye;|>Fa!=*Z&`m3
zo7loOc9209yT}<5k08$>J50goC=PLC5Q=Sq$57%hd^pC5t{P+#w6<UpkK0WOwkB}O
zlQ`oDn4=JR%JnqPc?K68Lyc!q=QtWXr_-JHxwo71y6BKYXbyWg(IpFd0+)`!i@4(C
zKap_lk|ltb-M$s*yowu$?&TB=+`=^7Uj$z3{L;?=r90nphEz3I*7h3}ty-?^<r^if
na8M|AQiD&_mv+~9NZap2HInR@vfe|I*S=Shc1!Wuj$-`*dFxqf

delta 332
zcmXYt+e!jq5XX0x&6RSig&?TxXa_SZ%@U%6ozF+pYD&xcZ(r+G^a4IX(6YA+<tyk-
zw?X%TZ_#Z}(8toi{9t|z!=GtHY7rx67|n{Tr{q`h!!g3taAKbGovCzT0gG6|GBQ}f
zD%M1hyRpta*boYIY+?)B*uk#QY{H(W3F0vJaUckXp31#A;y#3Mj1#LvklZ=-RGYXT
zS)9o!i=5BA&vToE#sj$EL0s|>xWW<WJS=+zS3HVq9z%hnDDpUNIA&2<dvEeNVd+(>
z5^g&cj{9cPilbCjc?x$t{cnP}mnH#lQr??^#VI^Mmw{#>@Ce(M5qS=3R*9BNDXJUl
oZwsYstr@E4+g>P;mQQ+4yFcv(3b<S5JZbK$nQ-6Cko##me}WERU;qFB

diff --git a/digitaleagentur/settings.py b/digitaleagentur/settings.py
index c674a0f..164f657 100644
--- a/digitaleagentur/settings.py
+++ b/digitaleagentur/settings.py
@@ -61,6 +61,7 @@ X_FRAME_OPTIONS = 'SAMEORIGIN'
 SECRET_KEY = '_qv2t2lmsctjxpbb4rrp=op%_20_hxzonv^mvty1o85c)l$s^q'
 
 ALLOWED_HOSTS = ['digitale-agentur.com', 'www.digitale-agentur.com', '127.0.0.1', 'localhost', 'dev01.digitale-agentur.com', '10.0.2.2']
+CSRF_TRUSTED_ORIGINS = ['127.0.0.1', 'localhost']
 
 # Application definition
 INSTALLED_APPS = [