Append xsrf_token if defined to API calls.

Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>

diff --git a/htdocs/javascript/core.js b/htdocs/javascript/core.js
index 3a79984..d863c56 100644 (file)
--- a/htdocs/javascript/core.js
+++ b/htdocs/javascript/core.js
@@ -112,6 +112,10 @@
                 onSuccess = payload;
             }
 
+            if ($.xsrf_token) {
+                apicall += '?token=' + $.xsrf_token;
+            }
+
             return $.ajax(ajaxParams(onSuccess, onError, {
                 url: $.plURL('api/' + $.xapiVersion + '/' + apicall),
                 type: 'POST',