Django - Javascript - Csrf Token

Question

This is the code I have attempted to try and add a csrf token to a javascript form.

function save() {
    var form = document.createElement("form");
    console.log(form);
    form.setAttribute('method', 'post');
    form.setAttribute('action', '/quiz_score/');
    document.body.appendChild(form);
    var i = document.createElement("input");
    i.setAttribute('name', 'Score');
    i.setAttribute('value', ""+score);
    i.setAttribute('name', 'csrfmiddlewaretoken');
    i.setAttribute('value', {% csrftoken %});
    form.appendChild(i);
    form.submit();
}

Can you see any problems with this? It has an error and therefore the JS does not run.

Alasdair · Accepted Answer · 2016-04-12 12:58:56Z

3

The {% csrftoken %} template tagoutputs the actual form tag (e.g. <input type='hidden' ... />.

If you just want the value of the token, use {{ csrf_token }} instead.

If you are submitting the form with an ajax request, you might find it easier to send the CSRF token as a header, rather than adding the tag to your form. See the docs for instructions.

answered Apr 12, 2016 at 12:58

Alasdair

310k59 gold badges605 silver badges534 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

rnevius · Accepted Answer · 2016-04-12 13:33:11Z

3

You have 2 errors in your code. Simple way look at code. Try it:

var i = document.createElement("input");
i.setAttribute('name', 'Score');
i.setAttribute('value', ""+score);
form.appendChild(i);
var i = document.createElement("input");
i.setAttribute('name', 'csrfmiddlewaretoken');
i.setAttribute('value', '{{ csrf_token }}');
form.appendChild(i);

edited Apr 12, 2016 at 13:33

rnevius

27.2k10 gold badges60 silver badges86 bronze badges

answered Apr 12, 2016 at 13:30

Abbasov Alexander

1,9381 gold badge20 silver badges27 bronze badges

Collectives™ on Stack Overflow

Django - Javascript - Csrf Token

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related