From 5f130bcf1892d938662a4acbdace38947e503007 Mon Sep 17 00:00:00 2001 From: kochetkov Date: Thu, 14 Nov 2024 09:30:41 +0300 Subject: [PATCH] fix from ervu repo --- .../webbpm/interceptor/absolute-url-csrf.interceptor.ts | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/frontend/src/ts/modules/webbpm/interceptor/absolute-url-csrf.interceptor.ts b/frontend/src/ts/modules/webbpm/interceptor/absolute-url-csrf.interceptor.ts index 1a523cb..37e6c31 100644 --- a/frontend/src/ts/modules/webbpm/interceptor/absolute-url-csrf.interceptor.ts +++ b/frontend/src/ts/modules/webbpm/interceptor/absolute-url-csrf.interceptor.ts @@ -17,14 +17,17 @@ export class AbsoluteUrlCsrfInterceptor implements HttpInterceptor { intercept(req: HttpRequest, next: HttpHandler): Observable> { - let requestToForward = req; + if (req.method === 'GET' || req.method === 'HEAD') { + return next.handle(req); + } let token = this.extractor.getToken(); let headerName = TokenConstants.CSRF_HEADER_NAME; + if (token != null && !req.headers.has(headerName)) { let headers = {}; headers[headerName] = token; - requestToForward = req.clone({setHeaders: headers}); + req = req.clone({setHeaders: headers}); } - return next.handle(requestToForward); + return next.handle(req); } }