diff --git a/frappe/desk/query_report.py b/frappe/desk/query_report.py index 13a8659d4a..cecd1bdbd9 100644 --- a/frappe/desk/query_report.py +++ b/frappe/desk/query_report.py @@ -120,6 +120,8 @@ def export_query(): data = frappe._dict(frappe.local.form_dict) del data["cmd"] + if "csrf_token" in data: + del data["csrf_token"] if isinstance(data.get("filters"), basestring): filters = json.loads(data["filters"]) diff --git a/frappe/desk/reportview.py b/frappe/desk/reportview.py index d8929ef055..920fb7f36b 100644 --- a/frappe/desk/reportview.py +++ b/frappe/desk/reportview.py @@ -27,6 +27,8 @@ def get_form_params(): data = frappe._dict(frappe.local.form_dict) del data["cmd"] + if "csrf_token" in data: + del data["csrf_token"] if isinstance(data.get("filters"), basestring): data["filters"] = json.loads(data["filters"])