Send X-***-Token on the upload XHR (fixes all uploads failing)

Ya

9 Julai 2026, 23:31 UTC

Mwandishi

kamo

Ahadi ya

6e41c58

The session moved from a cookie to per-tab sessionStorage (896ea516); window.fetch is monkey-patched to attach X-***-Token to /api/* calls, but the raw XMLHttpRequest used for upload progress is NOT patched — so every upload was unauthenticated (401 -> "Failed to upload background") while every fetch()-based call **************** still worked. Set the header explicitly on the XHR via getSessionToken().