dfsfds

files/assets/js/comments_v.js

@@ -1,17 +1,9 @@
-function post(url, callback, errortext) {
+function post(url) {
     var xhr = new XMLHttpRequest();
     xhr.open("POST", url, true);
     var form = new FormData()
     form.append("formkey", formkey());
     xhr.withCredentials=true;
-    xhr.onerror=function() { alert(errortext); };
-    xhr.onload = function() {
-        if (xhr.status >= 200 && xhr.status < 300) {
-            if (typeof callback === "function") callback();
-        } else {
-            xhr.onerror();
-        }
-    };
     xhr.send(form);
 };
 

files/routes/votes.py

@@ -165,6 +165,7 @@ def api_vote_comment(comment_id, new, v):
 
 @app.post("/vote/poll/<comment_id>")
 @auth_required
+@validate_formkey
 def api_vote_poll(comment_id, v):
 	
 	vote = request.values.get("vote")

files/templates/comments.html

@@ -33,7 +33,7 @@
 
 {% if v %}
 	{% include "award_modal.html" %}
-	<script src="/assets/js/comments_v.js?v=9"></script>
+	<script src="/assets/js/comments_v.js?v=10"></script>
 {% endif %}
 
 <script src="https://cdn.jsdelivr.net/npm/clipboard@2.0.8/dist/clipboard.min.js"></script>

files/templates/delete_post_modal.html

@@ -22,12 +22,8 @@
 
 			this.innerHTML='<span class="spinner-border spinner-border-sm mr-2" role="status" aria-hidden="true"></span>Deleting post';	
 			this.disabled = true; 
-			post('/delete_post/' + id,
-				callback = function() {
-
-					location.reload();
-				}
-				)
+			post('/delete_post/' + id);
+			location.reload();
 		}
 
 		document.getElementById("deletePostButton-mobile").onclick = delete_post;

files/templates/submission.html

@@ -36,7 +36,7 @@
 
 {% if 'rdrama' not in request.host %}
 	{% if v %}
-		<script src="/assets/js/comments_v.js?v=9"></script>
+		<script src="/assets/js/comments_v.js?v=10"></script>
 		{% include "award_modal.html" %}
 		{% include "emoji_modal.html" %}
 		{% include "gif_modal.html" %}