don't use csrf_exempt everywhere

2020-01-29 12:24:50 -08:00
parent f031b46b20
commit 7882bfe1ef
6 changed files with 8 additions and 12 deletions
--- a/fedireads/urls.py
+++ b/fedireads/urls.py
@ -31,7 +31,7 @@ urlpatterns = [

    # internal action endpoints
    re_path(r'^review/?$', views.review),
-    re_path(r'^shelve/(?P<shelf_id>\w+)/(?P<book_id>\d+)/?$', views.shelve),
+    re_path(r'^shelve/(?P<shelf_id>[\w_-]+)/(?P<book_id>\d+)/?$', views.shelve),
    re_path(r'^follow/?$', views.follow),
    re_path(r'^unfollow/?$', views.unfollow),
    re_path(r'^search/?$', views.search),