diff --git a/resources/views/layouts/master.blade.php b/resources/views/layouts/master.blade.php
index e9e5e61..4afa7d8 100644
--- a/resources/views/layouts/master.blade.php
+++ b/resources/views/layouts/master.blade.php
@@ -6,6 +6,7 @@
             {{$title}} - Sekolah Adiwiyata
         </title>
         <meta name="description" content="Marketing Dashboard">
+        <meta name="csrf-token" content="{{ csrf_token() }}">
         <meta http-equiv="X-UA-Compatible" content="IE=edge">
         <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no, user-scalable=no, minimal-ui">
         <!-- Call App Mode on ios devices -->
diff --git a/resources/views/modules/usulan/kriteria/form.blade.php b/resources/views/modules/usulan/kriteria/form.blade.php
index 041a687..a3f5556 100644
--- a/resources/views/modules/usulan/kriteria/form.blade.php
+++ b/resources/views/modules/usulan/kriteria/form.blade.php
@@ -204,7 +204,7 @@
                         withCredentials: true
                     },
                     headers: {
-                        'X-CSRF-TOKEN': "{{csrf_token()}}",
+                        'X-CSRF-TOKEN': document.querySelector('meta[name="csrf-token"]').getAttribute('content'),
                         'X-Requested-With': 'XMLHttpRequest'
                     },
                     // maxFilesize: 1, // dalam MB