diff options
| author |  Alexandre Alapetite <alexandre.alapetite@alexandra.dk>
| 2017-09-23 13:34:57 +0200 |
|---|---|---|
| committer | Alexandre Alapetite <alexandre.alapetite@alexandra.dk>
| 2017-09-23 13:34:57 +0200 |
| commit | 2fd5ab8c55e990d3ad6dacc5371dfd5f9b6bcd2e (patch) | |
| tree | 9d5b6def20fc21877cb68dca6a6fdcf6f0e3253a /p/scripts/global_view.js | |
| parent | bc109cff50833fc378832def77fb1e4a5b343bff (diff) | |
Fix global view CSRF
https://github.com/FreshRSS/FreshRSS/issues/1591
Diffstat (limited to 'p/scripts/global_view.js')
| -rw-r--r-- | p/scripts/global_view.js | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/p/scripts/global_view.js b/p/scripts/global_view.js index de0b9cb9f..e3de0fd52 100644 --- a/p/scripts/global_view.js +++ b/p/scripts/global_view.js @@ -33,6 +33,9 @@ function load_panel(link) { $.ajax({ type: "POST", url: $(this).attr("formaction"), + data : { + _csrf: context.csrf, + }, async: false }); window.location.reload(false); |