Merge pull request #770 from steven-v/master

update csrf token in ajax headers

Author: markstory

templates/element/cache_panel.php

@@ -105,7 +105,7 @@ function showMessage(el, text) {
         var messageEl = el.parent().find('.inline-message');
 
         var xhr = $.ajax({
-            headers: {'X-CSRF-TOKEN': '<?= $this->request->getParam('_csrfToken') ?>'},
+            headers: {'X-CSRF-TOKEN': '<?= $this->request->getAttribute('csrfToken') ?>'},
             url: baseUrl,
             data: {name: name},
             dataType: 'json',

templates/element/packages_panel.php

@@ -123,7 +123,7 @@ function buildErrorMessage(response) {
             showMessage(terminal, buildLoader());
             var direct = $('.direct-dependency')[0].checked;
             var xhr = $.ajax({
-                headers: {'X-CSRF-TOKEN': '<?= $this->request->getParam('_csrfToken') ?>'},
+                headers: {'X-CSRF-TOKEN': '<?= $this->request->getAttribute('csrfToken') ?>'},
                 url: baseUrl,
                 data: {direct: direct},
                 dataType: 'json',