From b4cb67e77f3b228c007f58caac234cae1afabe73 Mon Sep 17 00:00:00 2001
From: Andrew Dolgov <noreply@fakecake.org>
Date: Mon, 14 Sep 2020 20:00:01 +0300
Subject: remove csrf token from rpc method sanityCheck

---
 prefs.php | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'prefs.php')

diff --git a/prefs.php b/prefs.php
index 12976ad8f..51699cef9 100644
--- a/prefs.php
+++ b/prefs.php
@@ -39,6 +39,10 @@
 	}
 	?>
 
+	<script type="text/javascript">
+		const __csrf_token = "<?php echo $_SESSION["csrf_token"]; ?>";
+	</script>
+
 	<?php print_user_stylesheet() ?>
 
 	<link rel="shortcut icon" type="image/png" href="images/favicon.png"/>
-- 
cgit v1.2.3-54-g00ecf