Hi,
Seems like the xcsrf token is not set in the header.
Try something like this:
var header_xcsrf_token = sap.ui.getCore().getModel().getSecurityToken();
var oHeaders = {
"x-csrf-token" : header_xcsrf_token,
"slug" : file.name
};
jQuery
.ajax({
type : 'POST',
url : "/sap/opu/odata/sap/ZC_CI_UPLOAD_SRV/thesises('"
+ sap.ui.getCore().byId(
'masterSelect')
.getSelectedKey()
+ "')/files",
headers : oHeaders,
...
Kind regards,
RW