diff --git a/scripts/pi-hole/js/gravity.js b/scripts/pi-hole/js/gravity.js
index 6bb78b50..0f828982 100644
--- a/scripts/pi-hole/js/gravity.js
+++ b/scripts/pi-hole/js/gravity.js
@@ -26,6 +26,7 @@ function eventsource() {
   // eslint-disable-next-line compat/compat
   fetch("/api/action/gravity", {
     method: "POST",
+    headers: { "X-CSRF-TOKEN": $('meta[name="csrf-token"]').attr("content") },
   })
     // Retrieve its body as ReadableStream
     .then(response => {