From a74fabcc98476bf104a2616b6002594cc2becf38 Mon Sep 17 00:00:00 2001
From: Daniel Schalla <daniel@schalla.me>
Date: Thu, 4 Apr 2019 16:43:54 +0200
Subject: [PATCH] Add CSRF Header in File Upload and Profile Image Set
 Operations (#2686)

---
 .../file_upload_preview/file_upload_item/file_upload_item.js     | 1 +
 app/screens/edit_profile/edit_profile.js                         | 1 +
 2 files changed, 2 insertions(+)

diff --git a/app/components/file_upload_preview/file_upload_item/file_upload_item.js b/app/components/file_upload_preview/file_upload_item/file_upload_item.js
index fab33a2e3..64f96b24d 100644
--- a/app/components/file_upload_preview/file_upload_item/file_upload_item.js
+++ b/app/components/file_upload_preview/file_upload_item/file_upload_item.js
@@ -119,6 +119,7 @@ export default class FileUploadItem extends PureComponent {
             Authorization: `Bearer ${Client4.getToken()}`,
             'X-Requested-With': 'XMLHttpRequest',
             'Content-Type': 'multipart/form-data',
+            'X-CSRF-Token': Client4.csrf,
         };
 
         const fileInfo = {
diff --git a/app/screens/edit_profile/edit_profile.js b/app/screens/edit_profile/edit_profile.js
index b3d1ddbc0..05c0693f2 100644
--- a/app/screens/edit_profile/edit_profile.js
+++ b/app/screens/edit_profile/edit_profile.js
@@ -226,6 +226,7 @@ export default class EditProfile extends PureComponent {
             Authorization: `Bearer ${Client4.getToken()}`,
             'X-Requested-With': 'XMLHttpRequest',
             'Content-Type': 'multipart/form-data',
+            'X-CSRF-Token': Client4.csrf,
         };
 
         const fileInfo = {