Skip to content

Commit

Permalink
fix: allow POST chart/data request without CSRF token (#17429)
Browse files Browse the repository at this point in the history
  • Loading branch information
Erik Ritter authored and AAfghahi committed Jan 10, 2022
1 parent 4d4c2df commit 012121a
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion superset/config.py
Original file line number Diff line number Diff line change
Expand Up @@ -191,7 +191,7 @@ def _try_json_readsha(filepath: str, length: int) -> Optional[str]:
WTF_CSRF_ENABLED = True

# Add endpoints that need to be exempt from CSRF protection
WTF_CSRF_EXEMPT_LIST = ["superset.views.core.log", "superset.charts.api.data"]
WTF_CSRF_EXEMPT_LIST = ["superset.views.core.log", "superset.charts.data.api.data"]

# Whether to run the web server in debug mode or not
DEBUG = os.environ.get("FLASK_ENV") == "development"
Expand Down

0 comments on commit 012121a

Please sign in to comment.