From c65558f5a2506178149282848cd92b3a501ff5e6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=D0=98=D0=B3=D0=BE=D1=80=D1=8C=20=D0=9D=D0=B0=D0=B4=D0=B5?=
 =?UTF-8?q?=D0=B8=D0=BD?= <igor_26reg@mail.ru>
Date: Fri, 5 Dec 2025 15:02:51 +0300
Subject: [PATCH] =?UTF-8?q?fix:=20=D0=B4=D0=BE=D0=B1=D0=B0=D0=B2=D0=BB?=
 =?UTF-8?q?=D0=B5=D0=BD=20CSRF=20=D1=82=D0=BE=D0=BA=D0=B5=D0=BD=20=D0=B2?=
 =?UTF-8?q?=20=D1=84=D0=BE=D1=80=D0=BC=D1=83=20=D0=BA=D0=BE=D0=BC=D0=BC?=
 =?UTF-8?q?=D0=B5=D0=BD=D1=82=D0=B0=D1=80=D0=B8=D0=B5=D0=B2=20AJAX?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Добавлена функция getCsrfToken() для получения токена из cookie
- Добавлен скрытый input с csrfmiddlewaretoken в каждую форму
- Исправлена отправка комментариев в AJAX-режиме
---
 .../js/components/requestListHandler.js       | 21 +++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/backend/static/js/components/requestListHandler.js b/backend/static/js/components/requestListHandler.js
index e1ccc471..e4472c75 100644
--- a/backend/static/js/components/requestListHandler.js
+++ b/backend/static/js/components/requestListHandler.js
@@ -434,6 +434,7 @@ export function initRequestListHandler(options) {
             </div>
             <div class="comments-list" data-role="list"></div>
             <form class="comment-new mt-3 request-comment-form" data-role="form" autocomplete="off">
+              <input type="hidden" name="csrfmiddlewaretoken" value="${getCsrfToken()}">
               <div class="message-field message-field--compact">
                 <div class="dropdown message-emoji">
                   <button type="button" class="btn btn-ghost btn-emoji message-icon-btn"
@@ -456,6 +457,26 @@ export function initRequestListHandler(options) {
     `;
   }
 
+  /**
+   * Получает CSRF токен из cookie
+   * @returns {string} CSRF токен
+   */
+  function getCsrfToken() {
+    const name = 'csrftoken';
+    let cookieValue = '';
+    if (document.cookie && document.cookie !== '') {
+      const cookies = document.cookie.split(';');
+      for (let i = 0; i < cookies.length; i++) {
+        const cookie = cookies[i].trim();
+        if (cookie.substring(0, name.length + 1) === (name + '=')) {
+          cookieValue = decodeURIComponent(cookie.substring(name.length + 1));
+          break;
+        }
+      }
+    }
+    return cookieValue;
+  }
+
   /**
    * Получает CSS класс для статуса
    * @param {string} status - Статус заявления