add credentials same-origin

2023-07-25 10:49:59 +01:00 · 2023-07-25 10:49:59 +01:00 · b6c741fd05
commit b6c741fd05
parent 17887c05fd
1 changed files with 1 additions and 0 deletions
--- a/app/static/js/comments.js
+++ b/app/static/js/comments.js
@ -38,6 +38,7 @@ async function api(url, data) {
    var csrf = getCSRF()
    return fetch(url, {
        method: 'POST',
+        credentials: 'same-origin',
        headers: {
            'Content-Type': 'application/json',
            'X-CSRFToken': csrf