CSRF protection

2017-05-15 11:37:12 +02:00
parent fccdabb113
commit e91c6916ab
6 changed files with 37 additions and 23 deletions
--- a/data/web/js/admin.js
+++ b/data/web/js/admin.js
@@ -52,7 +52,7 @@ $(document).ready(function() {
        $.ajax({
          type: "POST",
          dataType: "json",
-          data: { "items": JSON.stringify(data_array) },
+          data: { "items": JSON.stringify(data_array), "csrf_token": csrf_token },
          url: '/api/v1/' + api_url,
          jsonp: false,
          complete: function (data) {