From 2fd5ab8c55e990d3ad6dacc5371dfd5f9b6bcd2e Mon Sep 17 00:00:00 2001
From: Alexandre Alapetite <alexandre.alapetite@alexandra.dk>
Date: Sat, 23 Sep 2017 13:34:57 +0200
Subject: Fix global view CSRF

https://github.com/FreshRSS/FreshRSS/issues/1591
---
 p/scripts/global_view.js | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'p')

diff --git a/p/scripts/global_view.js b/p/scripts/global_view.js
index de0b9cb9f..e3de0fd52 100644
--- a/p/scripts/global_view.js
+++ b/p/scripts/global_view.js
@@ -33,6 +33,9 @@ function load_panel(link) {
 			$.ajax({
 				type: "POST",
 				url: $(this).attr("formaction"),
+				data : {
+					_csrf: context.csrf,
+				},
 				async: false
 			});
 			window.location.reload(false);
-- 
cgit v1.2.3