From 87ec2bf4280e4b9b46aec1e6fee1de21dc60c5f8 Mon Sep 17 00:00:00 2001
From: Jacob Walls <jwalls@fargeo.com>
Date: Mon, 7 Oct 2024 09:48:29 -0400
Subject: [PATCH] Fix language switcher CSRF error when interacting before
 login #11528

---
 arches/app/templates/base-manager.htm         |  1 +
 arches/app/templates/index.htm                |  1 +
 .../project_name/templates/index.htm          |  1 +
 releases/7.6.1.md                             |  4 +--
 releases/7.6.2.md                             | 31 +++++++++++++++++++
 5 files changed, 36 insertions(+), 2 deletions(-)
 create mode 100644 releases/7.6.2.md

diff --git a/arches/app/templates/base-manager.htm b/arches/app/templates/base-manager.htm
index 39a67acc2d4..0916e72f064 100644
--- a/arches/app/templates/base-manager.htm
+++ b/arches/app/templates/base-manager.htm
@@ -362,6 +362,7 @@ <h1 class="page-header text-overflow ep-graph-title">
                         {% endif %}
 
                         {% if show_language_swtich %}
+                        {% csrf_token %}
                         {% get_current_language as LANGUAGE_CODE %}
                         <li aria-label="{% trans 'Choose your language' %}">
                             <div class="lang-switch ep-tools ep-tools-right" style="max-width: none;" data-bind='component: {
diff --git a/arches/app/templates/index.htm b/arches/app/templates/index.htm
index 0db8685dd7b..efddf2005a2 100644
--- a/arches/app/templates/index.htm
+++ b/arches/app/templates/index.htm
@@ -114,6 +114,7 @@ <h1>{% blocktrans %}Arches | {{version}}{% endblocktrans %}</h1>
                             </li>
                         {% endif %}
                         {% if show_language_swtich %}
+                        {% csrf_token %}
                             <li>
                                 {% get_current_language as LANGUAGE_CODE %}
                                 <div class="lang-switch" style="max-width: none;" data-bind='component: {
diff --git a/arches/install/arches-templates/project_name/templates/index.htm b/arches/install/arches-templates/project_name/templates/index.htm
index 94ab1024c40..1daac985fc1 100644
--- a/arches/install/arches-templates/project_name/templates/index.htm
+++ b/arches/install/arches-templates/project_name/templates/index.htm
@@ -113,6 +113,7 @@ <h1>{% blocktrans %}Arches | {{version}}{% endblocktrans %}</h1>
                             </li>
                         {% endif %}
                         {% if show_language_swtich %}
+                        {% csrf_token %}
                             <li>
                                 {% get_current_language as LANGUAGE_CODE %}
                                 <div class="lang-switch" style="max-width: none;" data-bind='component: {
diff --git a/releases/7.6.1.md b/releases/7.6.1.md
index 47db54dd23c..c8a60f1d17b 100644
--- a/releases/7.6.1.md
+++ b/releases/7.6.1.md
@@ -3,7 +3,7 @@ Arches 7.6.1 Release Notes
 
 ### Bug Fixes and Enhancements
 
-- Fixes bug causing the map layer manager to fail if a system uses DEFAULT_PERMISSIONS setting #[115522](https://github.com/archesproject/arches/issues/11522)
+- Fixes bug causing the map layer manager to fail if a system uses DEFAULT_PERMISSIONS setting #[11522](https://github.com/archesproject/arches/issues/11522)
 
 ### Dependency changes:
 ```
@@ -25,7 +25,7 @@ JavaScript:
     pip install --upgrade arches==7.6.1
     ```
 
-3. If you are running Arches on Apache, be restart your server:
+3. If you are running Arches on Apache, restart your server:
     ```
     sudo service apache2 reload
     ```
diff --git a/releases/7.6.2.md b/releases/7.6.2.md
new file mode 100644
index 00000000000..c46643a1d6a
--- /dev/null
+++ b/releases/7.6.2.md
@@ -0,0 +1,31 @@
+Arches 7.6.2 Release Notes
+--------------------------
+
+### Bug Fixes and Enhancements
+
+- Fix language switcher CSRF error when interacting before login #[11528](https://github.com/archesproject/arches/issues/11528)
+
+### Dependency changes:
+```
+Python:
+    Upgraded:
+        None
+
+JavaScript:
+    Upgraded:
+        none
+```
+
+### Upgrading Arches
+
+1. Upgrade to version 7.6.0 before proceeding by following the upgrade process in the [Version 7.6.0 release notes](https://github.com/archesproject/arches/blob/dev/7.6.x/releases/7.6.0.md)
+
+2. Upgrade to Arches 7.6.2
+    ```
+    pip install --upgrade arches==7.6.2
+    ```
+
+3. If you are running Arches on Apache, restart your server:
+    ```
+    sudo service apache2 reload
+    ```