fix(rpc): render canonical csrf token for clients

2026-08-12 18:20:14 +05:30
parent 0f201c9767
commit f73fbb7aba
4 changed files with 36 additions and 1 deletions
@@ -1873,6 +1873,7 @@ export function createHandlers(deps: RuntimeDeps): Handlers {
      body: renderedBody,
      scripts,
      extraHead: [
+        `<meta name="wrnexus-csrf" content="${escapeHtml(pageCsrf)}" />`,
        preserve ? `<meta name="wrnexus-preserve" content="${preserve}" />` : "",
        pwaEnabled ? `<link rel="manifest" href="/site.webmanifest" />` : "",
        pwaEnabled ? `<meta name="mobile-web-app-capable" content="yes" />` : "",