04/28 Fixed some security issues

2026-04-28 16:27:39 -04:00
parent d8b57cde77
commit bfc2f58fe2
38 changed files with 4273 additions and 4067 deletions
@@ -442,7 +442,9 @@ Code Management{% endblock %} {% block extra_head %}
        method: "POST",
        headers: {
          "Content-Type": "application/json",
+          "X-CSRF-Token": (window.qrConfig && window.qrConfig.csrfToken) || "",
          "X-Requested-With": "XMLHttpRequest",
+          "X-CSRF-Token": (window.qrConfig && window.qrConfig.csrfToken) || "",
        },
        body: JSON.stringify({
          new_status: newStatus,