fix: add csrf tokens to jsxc requests

1 files changed, 7 insertions, 0 deletions

diff --git a/ts/Bootstrap.ts b/ts/Bootstrap.ts
index a31432d..14b3a26 100644
--- a/ts/Bootstrap.ts
+++ b/ts/Bootstrap.ts
@@ -51,6 +51,13 @@ export default class Bootstrap {
          return;
       }
 
+      JSXC.jQuery(document).on('ajaxSend', function(_elm, xhr, settings) {
+         if (settings.crossDomain === false) {
+            xhr.setRequestHeader('requesttoken', OC.requestToken);
+            xhr.setRequestHeader('OCS-APIREQUEST', 'true');
+         }
+      });
+
       this.initJSXC();
       this.addWatcher();
       this.addAlternativeLogin();