X-Git-Url: https://git.auder.net/?p=vchess.git;a=blobdiff_plain;f=client%2Fsrc%2Futils%2Fajax.js;h=eb30330a7b7bb9a77ff1932819bd45af4777c129;hp=83b045c02bbda02ccd87a2bf24f34848ca4dbea5;hb=317b8a5610953b30cfb84382bd13764177ce830b;hpb=6f57a9769ad80459d086abf5232d01ec1ce7a470

diff --git a/client/src/utils/ajax.js b/client/src/utils/ajax.js
index 83b045c0..eb30330a 100644
--- a/client/src/utils/ajax.js
+++ b/client/src/utils/ajax.js
@@ -2,6 +2,7 @@ import params from "../parameters"; //for server URL
 
 // TODO: replace by fetch API ?
 // https://www.sitepoint.com/xmlhttprequest-vs-the-fetch-api-whats-best-for-ajax-in-2019/
+// Problem: fetch() does not set req.xhr... see access/ajax() security especially for /whoami
 
 // From JSON (encoded string values!) to "arg1=...&arg2=..."
 function toQueryString(data)