fix: allow POST chart/data request without CSRF token

apache · Nov 12, 2021 · 94f8b84 · 94f8b84
1 parent f10bc6d
commit 94f8b84
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/superset/config.py b/superset/config.py
@@ -191,7 +191,7 @@ def _try_json_readsha(filepath: str, length: int) -> Optional[str]:
 WTF_CSRF_ENABLED = True
 
 # Add endpoints that need to be exempt from CSRF protection
-WTF_CSRF_EXEMPT_LIST = ["superset.views.core.log", "superset.charts.api.data"]
+WTF_CSRF_EXEMPT_LIST = ["superset.views.core.log", "superset.charts.data.api.data"]
 
 # Whether to run the web server in debug mode or not
 DEBUG = os.environ.get("FLASK_ENV") == "development"