anti-csrf

2020-03-17 02:10:47 +00:00
parent 873bd1a73e
commit 1e7477dd96
4 changed files with 8 additions and 2 deletions
--- a/public/src/js/account.js
+++ b/public/src/js/account.js
@@ -423,6 +423,7 @@ class Account{
 			})
 			if(obj){
 				request.setRequestHeader("Content-Type", "application/json;charset=UTF-8")
+				request.setRequestHeader("X-CSRFToken", gameConfig._csrf_token)
 				request.send(JSON.stringify(obj))
 			}else{
 				request.send()