XSS error when trying to delete project

[derekeder]

Trying to delete deprecated app:

$.post( 'http://civic-json-app.herokuapp.com/delete-project/', data={'project_url': "https://github.com/smartchicago/chicago-health-atlas"}, function(resp){ console.log(resp) });

Getting an XSS error

[evz]

Whoops, heh, well, there are actually two things going on there. If you look at that route in the flask app, you'll see that it's missing the cross-domain decorator. The other thing is that you need a super secret key in order to actually delete stuff. Let's talk a bit offline about how to implement this, just so we don't get some joker in there deleting junk all willy-nilly.

[derekeder]

🃏 + 〰️ = ‼️

[evz]

Um, yes?