[5.1] ModalSelect add token to the URLs (joomla#43745)

Author: Fedik

build/media_source/system/js/fields/modal-content-select-field.es6.js

@@ -113,18 +113,24 @@ const setupField = (container) => {
     const action = button.dataset.buttonAction;
     const dialogConfig = button.dataset.modalConfig ? JSON.parse(button.dataset.modalConfig) : {};
     const keyName = container.dataset.keyName || 'id';
+    const token = Joomla.getOptions('csrf.token', '');
 
     // Handle requested action
     let handle;
     switch (action) {
       case 'select':
-      case 'create':
+      case 'create': {
+        const url = dialogConfig.src.indexOf('http') === 0 ? new URL(dialogConfig.src) : new URL(dialogConfig.src, window.location.origin);
+        url.searchParams.set(token, '1');
+        dialogConfig.src = url.toString();
         handle = doSelect(inputValue, inputTitle, dialogConfig);
         break;
+      }
       case 'edit': {
         // Update current value in the URL
         const url = dialogConfig.src.indexOf('http') === 0 ? new URL(dialogConfig.src) : new URL(dialogConfig.src, window.location.origin);
         url.searchParams.set(keyName, inputValue.value);
+        url.searchParams.set(token, '1');
         dialogConfig.src = url.toString();
 
         handle = doSelect(inputValue, inputTitle, dialogConfig);