@@ -, +, @@ --- Koha/Middleware/CSRF.pm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/Koha/Middleware/CSRF.pm +++ a/Koha/Middleware/CSRF.pm @@ -47,7 +47,7 @@ sub call { } elsif ( $stateful_methods{$request_method} ) { # Get the CSRF token from the param list or the header - my $csrf_token = $req->param('csrf_token') || $req->header('HTTP_CSRF_TOKEN'); + my $csrf_token = $req->param('csrf_token') || $req->header('CSRF_TOKEN'); if ( defined $req->param('op') && $original_op !~ m{^cud-} ) { $error = sprintf "Programming error - op '%s' must start with 'cud-' for %s", $original_op, --