Merge pull request #770 from steven-v/master

update csrf token in ajax headers
cakephp · Jul 29, 2020 · 6ca239b · 6ca239b
2 parents 801086c + 9a4458f
commit 6ca239b
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/templates/element/cache_panel.php b/templates/element/cache_panel.php
@@ -105,7 +105,7 @@ function showMessage(el, text) {
         var messageEl = el.parent().find('.inline-message');
 
         var xhr = $.ajax({
-            headers: {'X-CSRF-TOKEN': '<?= $this->request->getParam('_csrfToken') ?>'},
+            headers: {'X-CSRF-TOKEN': '<?= $this->request->getAttribute('csrfToken') ?>'},
             url: baseUrl,
             data: {name: name},
             dataType: 'json',

diff --git a/templates/element/packages_panel.php b/templates/element/packages_panel.php
@@ -123,7 +123,7 @@ function buildErrorMessage(response) {
             showMessage(terminal, buildLoader());
             var direct = $('.direct-dependency')[0].checked;
             var xhr = $.ajax({
-                headers: {'X-CSRF-TOKEN': '<?= $this->request->getParam('_csrfToken') ?>'},
+                headers: {'X-CSRF-TOKEN': '<?= $this->request->getAttribute('csrfToken') ?>'},
                 url: baseUrl,
                 data: {direct: direct},
                 dataType: 'json',