diff --git a/app/assets/javascripts/discourse/initializers/csrf-token.js.es6 b/app/assets/javascripts/discourse/initializers/csrf-token.js.es6 index 5fd21b31428..fd95c274d96 100644 --- a/app/assets/javascripts/discourse/initializers/csrf-token.js.es6 +++ b/app/assets/javascripts/discourse/initializers/csrf-token.js.es6 @@ -1,16 +1,15 @@ // Append our CSRF token to AJAX requests when necessary. export default { name: "csrf-token", - initialize(container) { - const session = container.lookup("session:main"); - const csrfToken = $("meta[name=csrf-token]").attr("content"); + initialize: function(container) { + var session = container.lookup("session:main"); // Add a CSRF token to all AJAX requests - session.set("csrfToken", csrfToken); + session.set("csrfToken", $("meta[name=csrf-token]").attr("content")); $.ajaxPrefilter(function(options, originalOptions, xhr) { if (!options.crossDomain) { - xhr.setRequestHeader("X-CSRF-Token", csrfToken); + xhr.setRequestHeader("X-CSRF-Token", session.get("csrfToken")); } }); }