Merge immortal/main into audit/securite-maintenabilite-standards

app/templates/pages/profile.html

@@ -1,5 +1,5 @@
 {% extends "layouts/base.html" %}
-{% block title %}{{ _('My Profile') }} - TryoutPro{% endblock %}
+{% block title %}{{ _('My Profile') }} - UdeS team manager{% endblock %}
 {% block page_title %}{{ _('My Profile') }}{% endblock %}
 {% block breadcrumb %}<span class="breadcrumb">Home / Profile</span>{% endblock %}
 
@@ -357,7 +357,10 @@ function saveCoachAvailability() {
     }
     fetch('{{ url_for("users.manage_coach_availability") }}', {
         method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
+        headers: {
+            'Content-Type': 'application/json',
+            'X-CSRFToken': '{{ csrf_token() }}'
+        },
         body: JSON.stringify({ slots: slots })
     })
     .then(r => r.json())
@@ -376,7 +379,10 @@ function saveCoachAvailability() {
 
 function clearAllAvailability() {
     if (!confirm('Are you sure you want to clear all your availability slots?')) return;
-    fetch('{{ url_for("users.clear_coach_availability") }}', { method: 'POST' })
+    fetch('{{ url_for("users.clear_coach_availability") }}', {
+        method: 'POST',
+        headers: { 'X-CSRFToken': '{{ csrf_token() }}' }
+    })
     .then(r => r.json())
     .then(data => {
         if (data.success) {
@@ -610,4 +616,4 @@ registerActions({
 });
 </script>
 {% endif %}
-{% endblock %}
+{% endblock %}