Use text/html for CSRF error page, refs #2390

2025-12-10 16:51:24 +01:00 · 2024-08-15 08:48:47 -07:00 · 2024-08-15 08:48:47 -07:00 · 05dfd34fd0
commit 05dfd34fd0
parent 160d82f06e
2 changed files with 4 additions and 2 deletions
--- a/datasette/app.py
+++ b/datasette/app.py
@ -1661,11 +1661,12 @@ class Datasette:
        async def custom_csrf_error(scope, send, message_id):
            await asgi_send(
                send,
-                await self.render_template(
+                content=await self.render_template(
                    "csrf_error.html",
                    {"message_id": message_id, "message_name": Errors(message_id).name},
                ),
-                403,
+                status=403,
+                content_type="text/html; charset=utf-8",
            )

        asgi = asgi_csrf.asgi_csrf(