N°7124 - [SECU] Cross-Site Request Forgery (CSRF) in several iTop pages

js/ckeditor.handler.js

@@ -115,6 +115,9 @@ const CombodoCKEditorHandler = {
 								fetch(uploadUrl, {
 									method: 'POST',
 									body: formData,
+									headers: {
+										'X-Combodo-Ajax': true
+									},
 								})
 									.then(response => response.json())
 									.then(responseData => {