From 81cc121ae71eefa64e8c9fdc4c655a908020fb60 Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Wed, 16 Sep 2026 22:47:12 +0000
Subject: [PATCH] fix: V-002 security vulnerability

Automated security fix generated by OrbisAI Security
---
 src/components/task.vue | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/components/task.vue b/src/components/task.vue
index 83915b57c..9cf5273ec 100644
--- a/src/components/task.vue
+++ b/src/components/task.vue
@@ -606,6 +606,12 @@ export default {
         this.onUpdate(Object.assign({}, this.requestData, formData));
       }
 
+      // Attach the CSRF token to the submitted payload so the resulting API
+      // call can be validated against forged cross-site submissions.
+      if (this.csrfToken) {
+        safeFormData._token = this.csrfToken;
+      }
+
       if (loading) {
         this.loadingButton = true;
       } else {