From 065a2f451a882136ff49ef3bb54131ab7c962ef6 Mon Sep 17 00:00:00 2001
From: Jorge Pinna Puissant <jpp@odoo.com>
Date: Mon, 7 Aug 2023 06:47:35 +0000
Subject: [PATCH] [REF] *: csrf_token is not available in the rendering context

As the templates are now rendered with owl, csrf_token is not available
in the rendering context.

Part of task~3443861

Part-of: odoo/odoo#130467
---
 addons/web/static/src/legacy/xml/base.xml                       | 2 +-
 .../static/src/js/website_event_meeting_room.js                 | 1 +
 .../static/src/xml/website_event_meeting_room.xml               | 2 +-
 addons/website_slides/static/src/js/slides_category_add.js      | 1 +
 addons/website_slides/static/src/xml/slide_management.xml       | 2 +-
 5 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/addons/web/static/src/legacy/xml/base.xml b/addons/web/static/src/legacy/xml/base.xml
index d65729b3caf..3b32a4be881 100644
--- a/addons/web/static/src/legacy/xml/base.xml
+++ b/addons/web/static/src/legacy/xml/base.xml
@@ -279,7 +279,7 @@
     <div t-attf-class="o_hidden_input_file #{fileupload_class or ''}" t-att-style="fileupload_style" aria-atomic="true">
         <form class="o_form_binary_form" t-att-target="fileupload_id"
               method="post" enctype="multipart/form-data" t-att-action="fileupload_action || '/web/binary/upload'">
-            <input type="hidden" name="csrf_token" t-att-value="csrf_token"/>
+            <input type="hidden" name="csrf_token" t-att-value="window.odoo.csrf_token"/>
             <input type="hidden" name="callback" t-att-value="fileupload_id"/>
             <input type="file" class="o_input_file" name="ufile"
                 t-att="{'multiple': multi_upload ? 'multiple' : null, 'accept': widget.accepted_file_extensions || '*'}"/>
diff --git a/addons/website_event_meet/static/src/js/website_event_meeting_room.js b/addons/website_event_meet/static/src/js/website_event_meeting_room.js
index 3283d069292..2cf9ac8c5d8 100644
--- a/addons/website_event_meet/static/src/js/website_event_meeting_room.js
+++ b/addons/website_event_meet/static/src/js/website_event_meeting_room.js
@@ -14,6 +14,7 @@ publicWidget.registry.websiteEventMeetingRoom = publicWidget.Widget.extend({
 
     start: function () {
         this._super.apply(this, arguments);
+        this.csrf_token = odoo.csrf_token;
         this.meetingRoomId = parseInt(this.$el.data('meeting-room-id'));
     },
 
diff --git a/addons/website_event_meet/static/src/xml/website_event_meeting_room.xml b/addons/website_event_meet/static/src/xml/website_event_meeting_room.xml
index eb9f67f0fad..dde8f8c39ae 100644
--- a/addons/website_event_meet/static/src/xml/website_event_meeting_room.xml
+++ b/addons/website_event_meet/static/src/xml/website_event_meeting_room.xml
@@ -41,7 +41,7 @@
                                 </select>
                             </div>
                             <input name="event" t-att-value="event" type="hidden"/>
-                            <input name="csrf_token" t-att-value="csrf_token" type="hidden"/>
+                            <input name="csrf_token" t-att-value="widget.csrf_token" type="hidden"/>
                         </form>
                     </main>
                     <footer class="modal-footer justify-content-start">
diff --git a/addons/website_slides/static/src/js/slides_category_add.js b/addons/website_slides/static/src/js/slides_category_add.js
index 5753ca62ae7..35494e3c3e8 100644
--- a/addons/website_slides/static/src/js/slides_category_add.js
+++ b/addons/website_slides/static/src/js/slides_category_add.js
@@ -28,6 +28,7 @@ var CategoryAddDialog = Dialog.extend({
             }]
         }, options || {});
 
+        this.csrf_token = odoo.csrf_token;
         this.channelId = options.channelId;
         this._super(parent, options);
     },
diff --git a/addons/website_slides/static/src/xml/slide_management.xml b/addons/website_slides/static/src/xml/slide_management.xml
index 199ae3cbe3b..59a04ff972e 100644
--- a/addons/website_slides/static/src/xml/slide_management.xml
+++ b/addons/website_slides/static/src/xml/slide_management.xml
@@ -16,7 +16,7 @@
      <t t-name="slides.category.add">
         <div>
             <form action="/slides/category/add" method="POST" id="slide_category_add_form">
-                <input type="hidden" name="csrf_token" t-att-value="csrf_token"/>
+                <input type="hidden" name="csrf_token" t-att-value="widget.csrf_token"/>
                 <input type="hidden" name="channel_id" t-att-value="widget.channelId"/>
                 <div class="mb-3 row">
                     <label for="section_name" class="col-sm-3 col-form-label">Section name</label>