etc/xsrf/script.js