json();

                if (response.ok) {
                    document.getElementById('test-result').innerHTML =
                        `<div class="success">‚úÖ CSRF Protection Working! ${data.message}</div>`;
                } else {
                    document.getElementById('test-result').innerHTML =
                        `<div class="error">‚ùå CSRF Error: ${data.message || 'Unknown error'}</div>`;
                }
            } catch (error) {
                document.getElementById('te