Fix language switcher CSRF error when interacting before login #11528 (…

…#11529) * Fix language switcher CSRF error when interacting before login #11528
archesproject · Oct 21, 2024 · f90e519 · f90e519
1 parent 426e8cd
commit f90e519
Show file tree

Hide file tree

Showing 5 changed files with 5 additions and 1 deletion.
diff --git a/arches/app/templates/base-manager.htm b/arches/app/templates/base-manager.htm
@@ -362,6 +362,7 @@ <h1 class="page-header text-overflow ep-graph-title">
                         {% endif %}
 
                         {% if show_language_swtich %}
+                        {% csrf_token %}
                         {% get_current_language as LANGUAGE_CODE %}
                         <li aria-label="{% trans 'Choose your language' %}">
                             <div class="lang-switch ep-tools ep-tools-right" style="max-width: none;" data-bind='component: {

diff --git a/arches/app/templates/index.htm b/arches/app/templates/index.htm
@@ -114,6 +114,7 @@ <h1>{% blocktrans %}Arches | {{version}}{% endblocktrans %}</h1>
                             </li>
                         {% endif %}
                         {% if show_language_swtich %}
+                        {% csrf_token %}
                             <li>
                                 {% get_current_language as LANGUAGE_CODE %}
                                 <div class="lang-switch" style="max-width: none;" data-bind='component: {

diff --git a/arches/install/arches-templates/project_name/templates/index.htm b/arches/install/arches-templates/project_name/templates/index.htm
@@ -113,6 +113,7 @@ <h1>{% blocktrans %}Arches | {{version}}{% endblocktrans %}</h1>
                             </li>
                         {% endif %}
                         {% if show_language_swtich %}
+                        {% csrf_token %}
                             <li>
                                 {% get_current_language as LANGUAGE_CODE %}
                                 <div class="lang-switch" style="max-width: none;" data-bind='component: {

diff --git a/releases/7.6.1.md b/releases/7.6.1.md
@@ -25,7 +25,7 @@ JavaScript:
     pip install --upgrade arches==7.6.1
     ```
 
-3. If you are running Arches on Apache, be restart your server:
+3. If you are running Arches on Apache, restart your server:
     ```
     sudo service apache2 reload
     ```
diff --git a/releases/7.6.2.md b/releases/7.6.2.md
@@ -2,6 +2,7 @@
 
 ### Bug Fixes and Enhancements
 
+-   Fix language switcher CSRF error when interacting before login #[11528](https://github.com/archesproject/arches/issues/11528)
 -   Fixes failure to serialize non-editable Django fields (e.g. auto-date fields) #[11272](https://github.com/archesproject/arches/issues/11272)
 -   Fixes bug in which resource relationships fail to appear in visualize mode if using default deny as a non-superuser #[11539](https://github.com/archesproject/arches/pull/11539)
 -   Fixes bypassing of display logic of details table in search results for client-cached resources #[11537](https://github.com/archesproject/arches/issues/11537)