diff --git a/public/js/demo.js b/public/js/demo.js
index 6202175a..4be0cc60 100755
--- a/public/js/demo.js
+++ b/public/js/demo.js
@@ -21,6 +21,14 @@
  * JQuery on ready callback function
  */
 function ready() {
+
+  // CSRF protection
+  $.ajaxSetup({
+    headers: {
+      'csrf-token': $('meta[name="ct"]').attr('content')
+    }
+  });
+
   // load all json data first
   $.when(
     $.ajax('/data/threshold_v0.1.1.json'),