Add CSRF Token support for Konami cheat console

1 files changed, 6 insertions, 0 deletions

diff --git a/public/javascripts/cheat.js b/public/javascripts/cheat.js
index 242dd79..c774e9f 100644
--- a/public/javascripts/cheat.js
+++ b/public/javascripts/cheat.js
@@ -20,11 +20,17 @@ new Konami(function () {
     form.setAttribute('method', 'post');
     form.setAttribute('action', '/console');
 
+    var csrfToken = document.createElement('input');
+    csrfToken.setAttribute('type', 'hidden');
+    csrfToken.setAttribute('name', 'csrfToken');
+    csrfToken.setAttribute('value', document.body.dataset.token);
+
     var field = document.createElement('input');
     field.setAttribute('type', 'text');
     field.setAttribute('name', 'command');
     field.setAttribute('autocomplete', 'off');
 
+    form.appendChild(csrfToken);
     form.appendChild(field);
     document.getElementsByTagName('body')[0].appendChild(form);