From 47715c39d0e3daad8fed3a28e7c2a425b3643e73 Mon Sep 17 00:00:00 2001
From: Vitor Avila <96086495+Vitor-Avila@users.noreply.github.com>
Date: Thu, 15 Aug 2024 19:54:50 -0300
Subject: [PATCH] fix(embedded): Remove CSRF requirement for dashboard download
 API (#29953)

---
 superset/config.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/superset/config.py b/superset/config.py
index a39dc432c..2fa8ef72b 100644
--- a/superset/config.py
+++ b/superset/config.py
@@ -258,6 +258,7 @@ WTF_CSRF_EXEMPT_LIST = [
     "superset.views.core.log",
     "superset.views.core.explore_json",
     "superset.charts.data.api.data",
+    "superset.dashboards.api.cache_dashboard_screenshot",
 ]
 
 # Whether to run the web server in debug mode or not