I'm coding a custom engine, but there was a step that can't be submitted, I spent a few hours to find the problem, here is what I found.
Looking at Request Headers through Chrome developer mode, found a suspected header.

Using Advanced REST Client extension to send a request.
Without x-csrf-token header // Status code: 302 Found, no page found and being redirected to login page.
![]()

With x-csrf-token header // Status code: 200 OK, data has been submitted successfully.
![]()

So, I want to request a command to send custom headers.
Something like this.
Something like this.
[STEP1]
modify url=...
post data=...
form request with=XMLHttpRequest
custom header=csrf-token=%csrf-token%
just download=1