Merge pull request #694 from steven-v/master

add csrf to ajax headers

Author: markstory

src/Template/Element/cache_panel.ctp

@@ -63,6 +63,7 @@ $(document).ready(function() {
         var messageEl = el.parent().find('.inline-message');
 
         var xhr = $.ajax({
+            headers: {'X-CSRF-TOKEN': '<?= $this->request->getParam('_csrfToken') ?>'},
             url: baseUrl,
             data: {name: name},
             dataType: 'json',

src/Template/Element/packages_panel.ctp

@@ -123,6 +123,7 @@
             showMessage(terminal, buildLoader());
             var direct = $('.direct-dependency')[0].checked;
             var xhr = $.ajax({
+                headers: {'X-CSRF-TOKEN': '<?= $this->request->getParam('_csrfToken') ?>'},
                 url: baseUrl,
                 data: {direct: direct},
                 dataType: 'json',