Index: lams_central/conf/security/Owasp.CsrfGuard.properties
===================================================================
diff -u -r33dd09b120d0ccb4fffb9e333fe08e101bd110f7 -r81dd463b85273eb0154d89ef7694101de563197b
--- lams_central/conf/security/Owasp.CsrfGuard.properties	(.../Owasp.CsrfGuard.properties)	(revision 33dd09b120d0ccb4fffb9e333fe08e101bd110f7)
+++ lams_central/conf/security/Owasp.CsrfGuard.properties	(.../Owasp.CsrfGuard.properties)	(revision 81dd463b85273eb0154d89ef7694101de563197b)
@@ -58,6 +58,7 @@
 org.owasp.csrfguard.protected.sbmtSubmissionDeadline=/lams/tool/lasbmt11/monitoring/setSubmissionDeadline.do
 
 org.owasp.csrfguard.protected.scribeDefineLater=/lams/tool/lascrb11/authoring/definelater.do
+org.owasp.csrfguard.protected.scribeAppointScribe=/lams/tool/lascrb11/monitoring/appointScribe.do
 
 org.owasp.csrfguard.protected.scratchieDefineLater=/lams/tool/lascrt11/authoring/definelater.do
 org.owasp.csrfguard.protected.scratchieSubmissionDeadline=/lams/tool/lascrt11/monitoring/setSubmissionDeadline.do
Index: lams_tool_scribe/src/java/org/lamsfoundation/lams/tool/scribe/web/controller/MonitoringController.java
===================================================================
diff -u -r7b3ea39ddf6e10186cf9916562121c205bb0e5ad -r81dd463b85273eb0154d89ef7694101de563197b
--- lams_tool_scribe/src/java/org/lamsfoundation/lams/tool/scribe/web/controller/MonitoringController.java	(.../MonitoringController.java)	(revision 7b3ea39ddf6e10186cf9916562121c205bb0e5ad)
+++ lams_tool_scribe/src/java/org/lamsfoundation/lams/tool/scribe/web/controller/MonitoringController.java	(.../MonitoringController.java)	(revision 81dd463b85273eb0154d89ef7694101de563197b)
@@ -50,6 +50,7 @@
 import org.springframework.stereotype.Controller;
 import org.springframework.web.bind.annotation.ModelAttribute;
 import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestMethod;
 
 @Controller
 @RequestMapping("/monitoring")
@@ -101,7 +102,7 @@
 	return "pages/monitoring/notebook";
     }
 
-    @RequestMapping("/appointScribe")
+    @RequestMapping(path = "/appointScribe", method = RequestMethod.POST)
     public String appointScribe(@ModelAttribute("monitoringForm") MonitoringForm monitoringForm,
 	    HttpServletRequest request) {
 
Index: lams_tool_scribe/web/pages/monitoring/summary.jsp
===================================================================
diff -u -r7ccd2797793d9c746fe08ab675942b820bf47742 -r81dd463b85273eb0154d89ef7694101de563197b
--- lams_tool_scribe/web/pages/monitoring/summary.jsp	(.../summary.jsp)	(revision 7ccd2797793d9c746fe08ab675942b820bf47742)
+++ lams_tool_scribe/web/pages/monitoring/summary.jsp	(.../summary.jsp)	(revision 81dd463b85273eb0154d89ef7694101de563197b)
@@ -64,7 +64,8 @@
 	<div class="loffset5">
 		<c:choose>
 			<c:when test="${not empty session.userDTOs and (not dto.autoSelectScribe or session.appointedScribe != null)}">
-				<form:form action="/lams/tool/lascrb11/monitoring/appointScribe.do" modelAttribute="monitoringForm">
+            <c:set var="csrfToken"><csrf:token/></c:set>
+				<form:form action="/lams/tool/lascrb11/monitoring/appointScribe.do?${csrfToken}" modelAttribute="monitoringForm" method="post">
 		
 					<form:hidden path="toolSessionID" value="${session.sessionID}" />
 					<form:hidden path="contentFolderID" />