fix(embedded): Remove CSRF requirement for dashboard download API (#29953)

Vitor-Avila · web-flow · commit 47715c39d0e3 · 2024-08-15T19:54:50.000-03:00
diff --git a/superset/config.py b/superset/config.py
@@ -258,6 +258,7 @@ def _try_json_readsha(filepath: str, length: int) -> str | None:
     "superset.views.core.log",
     "superset.views.core.explore_json",
     "superset.charts.data.api.data",
+    "superset.dashboards.api.cache_dashboard_screenshot",
 ]
 
 # Whether to run the web server in debug mode or not

Original file line number	Diff line number	Diff line change
`@@ -258,6 +258,7 @@ def _try_json_readsha(filepath: str, length: int) -> str \| None:`
`258`	`258`	`"superset.views.core.log",`
`259`	`259`	`"superset.views.core.explore_json",`
`260`	`260`	`"superset.charts.data.api.data",`
	`261`	`+ "superset.dashboards.api.cache_dashboard_screenshot",`
`261`	`262`	`]`
`262`	`263`
`263`	`264`	`# Whether to run the web server in debug mode or not`