.

anatomy/static/js/anatomy.js

@@ -108,10 +108,11 @@ $(document).ready(function () {
       })
       let post_url = document.getElementById("button-select-add-exam").dataset.exam_json_edit_url;
       let type = document.getElementById("button-select-add-exam").dataset.type;
+      let csrf = document.getElementById("button-select-add-exam").dataset.csrf;
       $.ajax({
         url: post_url,
         data: {
-          csrfmiddlewaretoken: "{{ csrf_token }}",
+          csrfmiddlewaretoken: csrf,
           add_exam_questions: JSON.stringify(ids),
           type: type,
           exam_id: $(evt.target).data("exam-id"),

longs/templates/longs/view.html

@@ -17,7 +17,7 @@
     {% render_table table %}
 </div>
 
-<button id="button-select-add-exam" data-exam_json_edit_url="{% url 'generic:generic_exam_json_edit' %}" data-exam_list_url="{% url 'generic:long-exams-list' %}" data-type="long">Add selected questions to
+<button id="button-select-add-exam" data-exam_json_edit_url="{% url 'generic:generic_exam_json_edit' %}" data-exam_list_url="{% url 'generic:long-exams-list' %}" data-type="long" data-csrf="{{ csrf_token}}">Add selected questions to
     exam</button>
 <div id="exam-options"></div>
 {% endblock %}

rapids/templates/rapids/view.html

@@ -15,7 +15,7 @@
 </div>
 {% render_table table %}
 
-<button id="button-select-add-exam" data-exam_json_edit_url="{% url 'generic:generic_exam_json_edit' %}" data-exam_list_url="{% url 'generic:rapid-exams-list' %}" data-type="rapid">Add selected questions to
+<button id="button-select-add-exam" data-exam_json_edit_url="{% url 'generic:generic_exam_json_edit' %}" data-exam_list_url="{% url 'generic:rapid-exams-list' %}" data-type="rapid" data-csrf="{{ csrf_token}}">Add selected questions to
     exam</button>
 <div id="exam-options"></div>