From 837c4baf56a5d2476ad28d2dc6be1cd3caccd3e5 Mon Sep 17 00:00:00 2001
From: Jared Vititoe <jjvititoe1@gmail.com>
Date: Fri, 9 Jan 2026 16:32:11 -0500
Subject: [PATCH] Security Updates

---
 views/DashboardView.php | 7 +++++++
 1 file changed, 7 insertions(+)
diff --git a/views/DashboardView.php b/views/DashboardView.php
index 16ce407..33f9172 100644
--- a/views/DashboardView.php
+++ b/views/DashboardView.php
@@ -14,6 +14,13 @@
     <script src="<?php echo $GLOBALS['config']['ASSETS_URL']; ?>/js/toast.js"></script>
     <script src="<?php echo $GLOBALS['config']['ASSETS_URL']; ?>/js/markdown.js"></script>
     <script src="<?php echo $GLOBALS['config']['ASSETS_URL']; ?>/js/dashboard.js"></script>
+    <script>
+        // CSRF Token for AJAX requests
+        window.CSRF_TOKEN = '<?php
+            require_once __DIR__ . '/../middleware/CsrfMiddleware.php';
+            echo CsrfMiddleware::getToken();
+        ?>';
+    </script>
 </head>
 <body data-categories='<?php echo json_encode($categories); ?>' data-types='<?php echo json_encode($types); ?>'>
 
