a"><code>FormData</code> in front-end  javascript</a>:</p>
<pre><code class="language-html">&lt;form method=&quot;POST&quot; action=&quot;/profilepic&quot; enctype=&quot;multipart/form-data&quot;&gt;
  &lt;input name=&quot;profilepic&quot; type=&quot;input&quot;&gt;
  &lt;input type=&quot;hidden&quot; name=&quot;_csrf&quot; value=&quot;{{_csrf}}&quot;&gt;
  &lt;input type=&quot;submit&quot; value=&quot;Send picture&quot;&gt;
&lt;/form&gt;
</code></pre>
<p>Note the <a href="/documentation/router/#csrf-token"