04/28 Fixed some security issues

templates/create_qr_code.html

@@ -564,6 +564,7 @@
         </div>
 
         <form method="POST" class="form" id="createQRForm">
+      <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
           <!-- Basic Information Section -->
           <div class="form-section">
             <div class="section-header">
@@ -1225,6 +1226,7 @@
           method: 'POST',
           headers: {
             'Content-Type': 'application/json',
+          'X-CSRF-Token': (window.qrConfig && window.qrConfig.csrfToken) || '',
           },
           body: JSON.stringify({ address: address })
         })