devilry / trix2

Next generation Trix. Detailed task control and statistics app for better learning outcome.
BSD 3-Clause "New" or "Revised" License
2 stars 3 forks source link

«How solved» doesn't work #151

Closed torgeirl closed 6 months ago

torgeirl commented 6 months ago

When students clicks one of the howsolved values (bymyself or withhelp) on course pages, Angular fails to deliver the HTTP response due to a 403 Forbidden error that is caused by a CSRF verification issue.

The problem was caused by our CSRF_TRUSTED_ORIGINS being too strict, and therefore not allowing the CSRF token from trix/trix_student/static/trix_student/src/app/assignments/controllers.coffee.