maciejpi/nordabiz
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

fix: Add CSRF exempt for analytics API endpoints

Browse Source
This commit is contained in:
Maciej Pienczyn 2026-01-13 19:46:29 +01:00
parent 986fa457cc
commit f3433d28f5
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app.py
View File

@ -3100,6 +3100,7 @@ def api_notifications_unread_count():
# ============================================================
@app.route('/api/analytics/track', methods=['POST'])
@csrf.exempt
def api_analytics_track():
"""Track clicks and interactions from frontend"""
data = request.get_json()
@ -3157,6 +3158,7 @@ def api_analytics_track():
@app.route('/api/analytics/heartbeat', methods=['POST'])
@csrf.exempt
def api_analytics_heartbeat():
"""Keep session alive and update duration"""
analytics_session_id = session.get('analytics_session_id')