Ticket #53
REPORT indicator stays live all day — CSRF blocking mark-read POST
closed
bug
normal
-
2026-05-23T08:48:25Z
2026-05-23T08:48:25Z
Description
briefing_bp was missing csrf.exempt(), causing mark-read POST to return 400. Client .then() fired anyway setting briefingReady = false locally, but server never wrote read: True so indicator stayed live on next page load. Fixed by adding csrf.exempt(briefing_bp) in app.py.
Ticket Events
-
CLOSE
—
Implemented and confirmed working — session 2026-05-23
2026-05-23T08:48:25Z
Add Comment