From df717386234904504f9d880cab67ef03bef1c501 Mon Sep 17 00:00:00 2001
From: Pablo Vazquez <venomgfx@gmail.com>
Date: Wed, 28 Mar 2018 23:38:09 +0200
Subject: [PATCH] Nodes preview now uses typewatch and csrf_token

---
 src/templates/layout.pug | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/src/templates/layout.pug b/src/templates/layout.pug
index 08942cc..744b43f 100644
--- a/src/templates/layout.pug
+++ b/src/templates/layout.pug
@@ -322,6 +322,20 @@ html(lang="en")
 
 		script(src="{{ url_for('static_pillar', filename='assets/js/vendor/jquery.bootstrap-3.3.7.min.js') }}")
 
+		| {% if current_user.is_authenticated %}
+		script(src="{{ url_for('static_pillar', filename='assets/js/vendor/jquery.typewatch-3.0.0.min.js') }}")
+		script.
+			// When sending an AJAX request, always add the X-CSRFToken header to it.
+			var csrf_token = "{{ csrf_token() }}";
+			$.ajaxSetup({
+				beforeSend: function (xhr, settings) {
+					if (!/^(GET|HEAD|OPTIONS|TRACE)$/i.test(settings.type) && !this.crossDomain) {
+						xhr.setRequestHeader("X-CSRFToken", csrf_token);
+					}
+				}
+			});
+		| {% endif %}
+
 		script.
 			$(document).ready(function() {
 				{% if current_user.is_authenticated %}