From a09fea1b36f23181a5d50665800d5e3977ec8529 Mon Sep 17 00:00:00 2001
From: russellballestrini <russell.ballestrini@gmail.com>
Date: Mon, 3 Jul 2017 08:41:46 -0400
Subject: [PATCH] update westworld template with csrf protection

	modified:   remarkbox_westworld/templates/westworld-base.j2
---
 remarkbox_westworld/templates/westworld-base.j2 | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/remarkbox_westworld/templates/westworld-base.j2 b/remarkbox_westworld/templates/westworld-base.j2
index 9edcaaf..a75f8be 100644
--- a/remarkbox_westworld/templates/westworld-base.j2
+++ b/remarkbox_westworld/templates/westworld-base.j2
@@ -2,24 +2,26 @@
 <html lang="en">
 <head>
   <title>{% block title %}{{ request.domain }}{% endblock %}</title>
-  
   <meta charset="utf-8" />
  
   <!-- this makes mobile pretty...  -->
   <meta name="viewport" content="width=device-width, initial-scale=1">
   <meta name="theme-color" content="#030408">
 
+    <!-- this is needed for async javascript requests -->
+  <script type="text/javascript">var csrf_token = "{{ request.session.get_csrf_token() }}";</script>
+
   <script type="text/javascript" src="/static/js/jquery-2.1.3.min.js"></script>
   <script type="text/javascript" src="/static/js/custom.js"></script>
   <script type="text/javascript" src="/static/js/iframe-resizer/iframeResizer.contentWindow.min.js"></script>
 
+  <link rel="stylesheet" href="/static/css/pygments.css">
   <link rel="stylesheet" href="/static/css/common.css">
   {% block stylesheets -%}
   <link rel="stylesheet" href="/static/css/embed.css">
   {%- endblock %}
-  <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Montserrat:700">
   <link rel="stylesheet" href="/static/theme/westworld/css/theme.css">
-  <link rel="stylesheet" href="/static/css/pygments.css">
+  <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Montserrat:700">
   
   {% include 'snippets/google-analytics.j2' %}