RDKB-66188: add CSRF token initialization in parental reports ajaxDo()

[pavankumar464]

No description provided.

[github-actions]

📋 PR Format Reminder

• Description missing:
  • Reason for change
  • Test Procedure
  • Risks (Low / Medium / High)
  • Priority (P0 / P1 / P2)

Expected:

TICKET-123 : brief description

Reason for change: why
Test Procedure: how to verify
Risks: Low / Medium / High
Priority: P0 / P1 / P2

[Copilot]

Pull request overview

Adds CSRF token initialization for the parental reports AJAX request so the existing headers: { csrfp_token: token } code sends a valid token.

Changes:

• Initialize token from $_SESSION['Csrf_token'] inside ajaxDo() before issuing the AJAX request.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

Comments suppressed due to low confidence (1)

source/Styles/xb3/jst/parental_reports.jst:304

• The CSRF token is only sent as a request header, but the in-repo CSRFProtector implementation validates GET requests using $_GET[csrfp_token] (and its POST helper only checks $_POST, not headers). If this endpoint is protected for GET, the header alone won’t satisfy validation; include the token in the query params (or switch this endpoint to POST to avoid putting tokens in URLs).

	ajaxrequest=$.ajax({
		type:"GET",
		url:"actionHandler/ajax_parental_reports.jst",
		data:{mode:mode,timef:timef},
		dataType:"json",
		headers: { csrfp_token: token },
		success:function(results){

[Copilot]

Pull request overview

Copilot reviewed 3 out of 3 changed files in this pull request and generated no new comments.