From 3a75b2db35df9e2090d545a8df61eb24f7553300 Mon Sep 17 00:00:00 2001
From: Yashar Robert <y.robert@amsterdam.nl>
Date: Tue, 30 Jul 2024 09:59:14 +0200
Subject: [PATCH] Inject CSRF token in line with new DRF template

---
 src/templates/dso_api/dynamic_api/api.html | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/src/templates/dso_api/dynamic_api/api.html b/src/templates/dso_api/dynamic_api/api.html
index 4c7291baa..2266b4c5f 100644
--- a/src/templates/dso_api/dynamic_api/api.html
+++ b/src/templates/dso_api/dynamic_api/api.html
@@ -287,11 +287,11 @@ <h5>Bronhouder: {{ authorization_grantor|default_if_none:"Onbekend"}}</h5>
     <option value="false">false</option>
   </datalist>
 </div>
-<script>
-  window.drf = {
-    csrfHeaderName: "{{ csrf_header_name|default:'X-CSRFToken' }}",
-    csrfToken: "{% if request %}{{ csrf_token }}{% endif %}"
-  };
+<script type="application/json" id="drf_csrf">
+  {
+    "csrfHeaderName": "{{ csrf_header_name|default:'X-CSRFToken' }}",
+    "csrfToken": "{% if request %}{{ csrf_token }}{% endif %}"
+  }
 </script>
 <script>
   const DATASET_URL = "{{ dataset_url }}";