Adding config bool for userhall image upload

2026-05-11 05:59:37 +02:00
parent 1f4cbfcec7
commit 9d4d3fbdcb
7 changed files with 101 additions and 60 deletions
--- a/src/user_hall_image_handler.mjs
+++ b/src/user_hall_image_handler.mjs
@@ -48,7 +48,7 @@ export const handleUserHallImageUpload = async (req, res, slug) => {
  if (!session) return sendJson(res, { success: false, msg: 'Unauthorized' }, 403);

  // CSRF check
-  const token = req.headers['x-csrf-token'];
+  const token = req.headers['x-csrf-token'] || req.url?.qs?.csrf_token;
  if (!token || token !== session.csrf_token) {
    return sendJson(res, { success: false, msg: 'Invalid CSRF token' }, 403);
  }