Index: lams_central/conf/security/Owasp.CsrfGuard.properties
===================================================================
diff -u -r8a0116b9f105c1a090bd8adbac814e54f32673e3 -rf1ca97f406da2f8804ba1ab0fe07f96738053010
--- lams_central/conf/security/Owasp.CsrfGuard.properties	(.../Owasp.CsrfGuard.properties)	(revision 8a0116b9f105c1a090bd8adbac814e54f32673e3)
+++ lams_central/conf/security/Owasp.CsrfGuard.properties	(.../Owasp.CsrfGuard.properties)	(revision f1ca97f406da2f8804ba1ab0fe07f96738053010)
@@ -23,6 +23,7 @@
 org.owasp.csrfguard.protected.laqaSubmissionDeadline=/lams/tool/laqa11/monitoring/setSubmissionDeadline.do
 org.owasp.csrfguard.protected.mindmapSubmissionDeadline=/lams/tool/lamind10/monitoring/setSubmissionDeadline.do
 org.owasp.csrfguard.protected.notebookSubmissionDeadline=/lams/tool/lantbk11/monitoring/setSubmissionDeadline.do
+org.owasp.csrfguard.protected.notebookSaveTeacherComment=/lams/tool/lantbk11/monitoring/saveTeacherComment.do
 org.owasp.csrfguard.protected.sbmtSubmissionDeadline=/lams/tool/lasbmt11/monitoring/setSubmissionDeadline.do
 org.owasp.csrfguard.protected.scratchieSubmissionDeadline=/lams/tool/lascrt11/monitoring/setSubmissionDeadline.do
 org.owasp.csrfguard.protected.surveySubmissionDeadline=/lams/tool/lasurv11/monitoring/setSubmissionDeadline.do
Index: lams_tool_notebook/web/pages/monitoring/summary.jsp
===================================================================
diff -u -r1beaa4cc5e224dd433297d543c5511234c0bfc10 -rf1ca97f406da2f8804ba1ab0fe07f96738053010
--- lams_tool_notebook/web/pages/monitoring/summary.jsp	(.../summary.jsp)	(revision 1beaa4cc5e224dd433297d543c5511234c0bfc10)
+++ lams_tool_notebook/web/pages/monitoring/summary.jsp	(.../summary.jsp)	(revision f1ca97f406da2f8804ba1ab0fe07f96738053010)
@@ -143,7 +143,7 @@
  					}).text(comment).appendTo(subgrid); 
   					
  					$(".editable${sessionId}_" + rowId + "_t").jinplace({
- 					    url: "<c:url value='/monitoring/saveTeacherComment.do?userUid='/>" + userUid,
+ 					    url: "<c:url value='/monitoring/saveTeacherComment.do?userUid='/>" + userUid + "&<csrf:token/>",
  					    textOnly: true,
  					    placeholder: '<fmt:message key="label.click.to.edit" />',
  					    okButton: "<fmt:message key='button.ok' />",
@@ -233,4 +233,4 @@
 
 <%@include file="advanceOptions.jsp"%>
 
-<%@include file="daterestriction.jsp"%>
\ No newline at end of file
+<%@include file="daterestriction.jsp"%>