Request GSA SER new command in custom engine (Custom request headers)

I'm coding a custom engine, but there was a step that can't be submitted, I spent a few hours to find the problem, here is what I found.


Looking at Request Headers through Chrome developer mode, found a suspected header.




Using Advanced REST Client extension to send a request.

Without x-csrf-token header // Status code: 302 Found, no page found and being redirected to login page.





With x-csrf-token header // Status code: 200 OK, data has been submitted successfully.




So, I want to request a command to send custom headers.

Something like this.


[STEP1]
modify url=...
post data=...
form request with=XMLHttpRequest 
custom header=csrf-token=%csrf-token%
just download=1
Sign In or Register to comment.