Public Access
Fix buyNow CSRF: use dynamic origin. Remove pricing foot from Empire card.
This commit is contained in:
@@ -640,7 +640,7 @@ var si = 0,
|
||||
var location = locSelect ? locSelect.value : '';
|
||||
var form = document.createElement('form');
|
||||
form.method = 'POST';
|
||||
form.action = 'https://ODOO4projects.com/shop/post_basket';
|
||||
form.action = window.location.origin + '/shop/post_basket';
|
||||
form.target = '_blank';
|
||||
form.style.display = 'none';
|
||||
var basket = document.createElement('input');
|
||||
|
||||
Reference in New Issue
Block a user