You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@superset.apache.org by er...@apache.org on 2021/11/12 23:18:24 UTC
[superset] branch master updated: fix: allow POST chart/data
request without CSRF token (#17429)
This is an automated email from the ASF dual-hosted git repository.
erikrit pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/superset.git
The following commit(s) were added to refs/heads/master by this push:
new aa8040e fix: allow POST chart/data request without CSRF token (#17429)
aa8040e is described below
commit aa8040ec9b0033fab8301afea6fccfcf2a245260
Author: Erik Ritter <er...@airbnb.com>
AuthorDate: Fri Nov 12 15:17:21 2021 -0800
fix: allow POST chart/data request without CSRF token (#17429)
---
superset/config.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/superset/config.py b/superset/config.py
index db34343..4b571da 100644
--- a/superset/config.py
+++ b/superset/config.py
@@ -191,7 +191,7 @@ QUERY_SEARCH_LIMIT = 1000
WTF_CSRF_ENABLED = True
# Add endpoints that need to be exempt from CSRF protection
-WTF_CSRF_EXEMPT_LIST = ["superset.views.core.log", "superset.charts.api.data"]
+WTF_CSRF_EXEMPT_LIST = ["superset.views.core.log", "superset.charts.data.api.data"]
# Whether to run the web server in debug mode or not
DEBUG = os.environ.get("FLASK_ENV") == "development"